The threat actors behind the GhostAction supply chain campaign have shifted tactics to target open-source developers. They are now distributing information stealers camouflaged as fake font files across nearly a hundred compromised GitHub repositories following crackdowns on their previous workflow injection methods.
READ THE ORIGINAL ARTICLE AT THEHACKERNEWS.COM →