GhostAction Phishing Campaign

The GhostAction phishing campaign used a targeted GitHub phishing proxy to steal developer credentials and one-time codes with a sophisticated GitHub phishing kit. The campaign shows attackers continuing to invest in high-quality phishing tooling aimed squarely at software developers.