New GhostFrame Super Stealthy Phishing Kit Attacks Millions of Users Worldwide

GhostFrame is a sophisticated phishing-as-a-service kit observed in widespread use (over 1 million attacks) that conceals phishing forms inside invisible iframes, uses unique subdomains per target with rotation and backups, and employs anti-analysis measures (blocking right-click, disabling developer tools) and an image-streaming delivery to evade detection; the report outlines the attack flow, technical features, and recommends layered defenses including browser updates, email security gateways, iframe restrictions, and user training.