11-10-2026
GhostAction Phishing Campaign
https://opensourcemalware.com/blog/ghostaction-phishing-campaign
Report completeness: Medium
Actors/Campaigns:
Ghostaction
Threats:
Supply_chain_technique
Victims:
Open source developers, Software development sector
Geo:
Moscow, Bulgaria
TTPs:
Tactics: 1
Technics: 0
ChatGPT TTPs:
do not use without manual checkT1005, T1036.005, T1041, T1056.003, T1059.007, T1071.001, T1078.004, T1111, T1195.002, T1528, have more...
IOCs:
Domain: 7
Email: 1
IP: 1
Url: 10
Hash: 5
File: 2
Soft:
Chrome, Gmail, Slack, SendGrid, Anthropic, OpenAI
Algorithms:
sha256
Win API:
ARC
Languages:
javascript
