Malware
Ghost Loader
- First Reported
- Sep 25, 2026
- Latest Reported
- Sep 25, 2026
Reported Context (1)
- SSH keys also remain a persistent target. Infostealers like Ghost Loader specifically extract ~/.ssh/id_rsa to gain long-term GitHub access. For session hijacking, attackers target browser cookies including Infostealers Target Cloud, Code, and AI Credentials to Enable Account Takeover
CVE (1)
Malware (7)
Threat Actors (2)
MITRE ATT&CK (8)
Vendors (6)
Products (8)
Tools (4)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.