Tag: font file malware

GhostAction Targets GitHub with Credential Stealer Disguised as Font File

A new wave of GhostAction attacks is targeting GitHub users with a sneaky credential stealer disguised as a font file, leading to 94 compromised repositories and a significant escalation of the supply-chain assault. The attackers are using social engineering tactics, including phishing emails that mimic GitHub security alerts, to trick developers into handing over sensitive information.