SpiderFoot is a tool tracked across 1 threat cluster and 2 intelligence report mentions on ThreatCluster. First observed June 4, 2026; most recent activity June 4, 2026.
Hackers are impersonating well-known security tools like Ghidra, dnSpy, and SpiderFoot to distribute malware through convincing fake download sites. These sites mimic legitimate project portals, complete with…