Threat Actor
GhostCall
- First Reported
- Mar 24, 2026
- Latest Reported
- Mar 24, 2026
Reported Context (1)
- A related campaign targeting cryptocurrency professionals is reported to share activity overlap with the cluster tracked as GhostCall; the article does not establish that GhostCall conducted the specific StoatWaffle activity. North Korean WaterPlum Uses VS Code Auto-Run Tasks to Deliver StoatWaffle
Malware (8)
People (4)
Threat Actors (2)
MITRE ATT&CK (7)
Vendors (1)
Products (6)
Industries (1)
Countries (2)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.