Phantom is a technology platform tracked across 7 threat clusters and 10 intelligence report mentions on ThreatCluster. First observed December 1, 2025; most recent activity July 1, 2026.
Phantom Stealer is a Windows-targeted information-stealing malware campaign that delivers its payload via ISO mounting, enabling covert execution and data exfiltration from infected hosts. The campaign demonstrates the use of removable-media-like delivery techniques to deploy stealer payloads, underscoring persistent risk from information-stealer families in the cybersecurity landscape.
On July 1, 2026, security firm SlowMist identified a fake trading bot on GitHub designed to spread malware targeting Polymarket users and DeFi developers. The bot, named 'polymarket-arbitrage-bot', was promoted as a…
The Google Threat Intelligence Group (GTIG) reports that North Korean threat actor UNC5342 has adopted a new technique called EtherHiding to deliver malware and facilitate cryptocurrency theft. This method embeds…
Torg Grabber, a new infostealer malware, is actively targeting 728 cryptocurrency wallet extensions and other applications, including password managers and communication tools. The malware employs the ClickFix technique…
Trust Wallet has confirmed a security vulnerability in version 2.68 of its browser extension, leading to the theft of funds from hundreds of users, totaling at least $6 million. Users are advised to disable the…
A sophisticated phishing campaign has been identified, originating in Russia, that deploys the Phantom information-stealing malware through malicious ISO files. This operation, named 'Operation MoneyMount-ISO,'…
A new phishing campaign is targeting MetaMask users by mimicking two-factor authentication (2FA) processes to steal wallet recovery phrases. The attack utilizes professional branding and fake emails that appear to be…
Chinese hackers have leveraged artificial intelligence tools to conduct cyberattacks, with Anthropic, a major US company, reporting a recent incident. The attacks utilize AI models capable of writing code, scanning…