Threat actor

GhostPoster

In 3 briefs, most recently 18 January 2026. RSS for this tag

Learn more: Malpedia ↗ ThreatFox ↗ MalwareBazaar ↗

Coverage in DanSec Daily

  1. Covers a reported U.S. cyber blackout in Venezuela, a Black Basta ransomware suspect identification, and 17 more malicious GhostPoster browser extensions with …
  2. The Trust Wallet Chrome extension theft, Ivanti EPMM zero-day attacks, and the DarkSpectre browser extension campaign hitting 2.2 million users.
  3. LKQ Oracle EBS breach, Cisco AsyncOS zero-day CVE-2025-20393 exploited by China-linked APT, and Kimwolf botnet hijacking 1.8M Android devices for DDoS.