1 post
GhostAction's second stage hides a credential stealer in a fake font file that runs when developers open the project in VS Code.
