Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2026-10-19 ⋅ The Hacker News ⋅ Ravie Lakshmanan
GhostAction Attackers Plant Credential Stealer Disguised as Font in 94 GitHub Repositories
GhostAction
2026-10-16 ⋅ OpenSourceMalware ⋅ OpenSourceMalware
GhostAction Copycats PolinRider by Hiding a Stealer in a Fake Font File
GhostAction
2026-08-21 ⋅ Bitso Quetzal Team ⋅ Mauro Eldritch, Nelson Colon
North Korea’s Crypt: Hunting Ghosts
StoatWaffle
2026-07-27 ⋅ Intrusiontruth ⋅ Intrusiontruth
Dear Diary, Today I found a Ghost in the Network
2026-05-27 ⋅ Group-IB ⋅ Kuvonchbek Yorkulov, Yuan Huang
The GHOST STADIUM Score: Billions At Stake At The World’s Largest Football Tournament
GHOST STADIUM
2026-04-13 ⋅ khr0x
Tweet about HanGhost
HanGhost
2026-04-13 ⋅ Twitter (@anyrun_app) ⋅ Achmad Adhikara, khr0x
Tweet about HanGhost
2026-03-26 ⋅ Darktrace ⋅ Isabel Evans
Phantom Footprints: Tracking GhostSocks Malware
GhostSocks Lumma Stealer
2026-03-17 ⋅ Seqrite ⋅ Sathwik Ram Prakki
Operation GhostMail: Russian APT exploits Zimbra Webmail to Target Ukraine State Agency
ZimReaper
2026-03-13 ⋅ kmsec ⋅ Kieran Miyamoto
First instance of PylangGhost RAT observed on npm
PylangGhost
2026-03-04 ⋅ Huntress Labs ⋅ Jai Minton, Ryan Dowd
"Malware, from the Outside!": How a Threat Actor Used Fake OpenClaw Installers to Infect Systems with GhostSocks and Information Stealers
GhostSocks Vidar
2026-01-07 ⋅ Group-IB ⋅ Anvar Anarkulov, Batuhan Karakoç, Karam Chatra
Ghost Tapped: Tracking the Rise of Chinese Tap-to-pay Android Malware
2026-01-06 ⋅ Trellix ⋅ Aswath A
The Ghost in the Machine: Unmasking CrazyHunter's Stealth Tactics
CrazyHunter
2025-12-08 ⋅ Trend Micro ⋅ Aliakbar Zahravi
AI-Automated Threat Hunting Brings GhostPenguin Out of the Shadows
GhostPenguin
2025-10-28 ⋅ Kaspersky ⋅ Omar Amin, Sojun Ryu
Crypto wasted: BlueNoroff’s ghost mirage of funding and jobs
2025-09-30 ⋅ Synthient ⋅ Synthient
GhostSocks: From Initial Access to Residential Proxy
GhostSocks Lumma Stealer
2025-09-05 ⋅ GitGuardian ⋅ Gaetan Ferry
The GhostAction Campaign: 3,325 Secrets Stolen Through Compromised GitHub Workflows
GhostAction
2025-09-04 ⋅ ESET Research ⋅ Fernando Tavella
GhostRedirector poisons Windows servers: Backdoors with a side of Potatoes
GoToHTTP GhostRedirector
2025-08-20 ⋅ Kroll ⋅ Marc Messer, Otavio Passos, Ryan Hicks
XWORM Returns to Haunt Systems with Ghost Crypt
XWorm
2025-08-06 ⋅ ANY.RUN ⋅ Mauro Eldritch
PyLangGhost RAT: Rising Stealer from Lazarus Group Striking Finance and Technology
PylangGhost GolangGhost