Malware
PhantomRaven
- First Reported
- Sep 16, 2026
- Latest Reported
- Sep 18, 2026
Reported Context (2)
- CrowdStrike has tied an npm-based information stealer called PhantomRaven to a financially motivated actor who moonlights as a bug bounty hunter. Weekly Cybersecurity Roundup: Ransomware Sentencing, AI Agent Attacks and Critical Flaws
- CrowdStrike identified PhantomRaven, a JavaScript information stealer distributed through malicious npm packages and likely written with help from a large language model, with the operator posing as a bug bounty hunter CrowdStrike Details PhantomRaven, an npm Information Stealer Likely Built with LLM Assistance
CVE (3)
Malware (3)
Threat Actors (1)
MITRE ATT&CK (18)
Vendors (6)
Products (14)
Industries (4)
Countries (2)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.