GhostPage is a malware family tracked across 1 threat cluster and 1 intelligence report mention on ThreatCluster. First observed December 5, 2025; most recent activity December 5, 2025.
GhostPage is a malware family linked to the GhostFrame phishing kit, a stealthy and effective phishing framework observed in the wild. The GhostFrame kit enables rapid deployment of convincing phishing pages for credential harvesting and has seen wide adoption among threat actors, signaling a shift toward accessible, robust phishing infrastructure.
The GhostFrame phishing kit, identified by Barracuda Networks, has been involved in over one million attacks. This kit utilizes a simple HTML file as a benign landing page while concealing malicious content within an…