GhostPoster Attack is a threat campaign tracked across 1 threat cluster and 1 intelligence report mention on ThreatCluster. First observed December 17, 2025; most recent activity December 17, 2025.
GhostPoster Attack is a threat campaign that uses PNG icons as a lure/vector to compromise Firefox users, reportedly affecting about 50,000 victims. The campaign highlights how image assets and iconography in browser contexts can be weaponized to deliver payloads, underscoring evolving social-engineering and drive-by techniques targeting mainstream browsers.
The GhostPoster malware campaign has compromised approximately 50,000 Firefox users by exploiting browser extensions that disguise malicious payloads within PNG icons. This attack utilizes a steganography technique to…