GhostAction Attackers Hide Credential Stealer Inside a Fake Font Across 94 GitHub Repositories
RedSide Security October 19, 2026 Cyber Attacks 10 views
The GhostAction threat actor has moved beyond malicious GitHub Actions workflows, phishing developers and hiding a credential stealer in a fake font file found across 94 repositories.
Continue reading: GhostAction Attackers Hide Credential Stealer Insi…