Researchers say the campaign uses a browser-based JavaScript VM to hide credential theft and intercept MFA at scale.
Ghostwriter used Prometheus lures since spring 2026 to target Ukraine agencies, enabling malware delivery and data theft.
A malicious version of the PyTorch Lightning package published on the Python Package Index (PyPI) delivers a credential-stealing payload targeting browsers, environment files, and cloud services. The ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results