GhostPoster Attack Compromises 50,000 Firefox Users via PNG Icons
First seen 17 Dec 2025, 20:56 UTC
•
•93% similarity
•27
Share:
Export
Ask AI about this cluster
Analyzing cluster data...
Referenced clusters:
Something went wrong. Please try again.
Cluster AI
Ask questions about this threat cluster with AI-powered analysis.
Get Researcher $29.99/moArticle Content
Browse articles
The GhostPoster malware campaign has compromised approximately 50,000 Firefox users by exploiting browser extensions that disguise malicious payloads within PNG icons. This attack utilizes a steganography technique to conceal the malware, making it difficult for users to detect the threat. Affected extensions include seemingly benign applications like 'Free VPN Forever.'
ThreatCluster AI