GhostClaw, a macOS infostealer, is spreading through GitHub repositories and developer tools, and it works because routine install habits make running malware feel completely normal. GhostClaw is spreading across GitHub Jamf researchers tracked the campaign's shift from npm packages to GitHub reposi…
GhostClaw turns GitHub habits into a macOS malware pipeline
GhostClaw, a macOS infostealer, is spreading through GitHub repositories and developer tools, and it works because routine install habits make running malware feel completely normal. GhostClaw is spreading across GitHub Jamf researchers tracked the campaign's shift from npm packages to GitHub reposi…
Read original