New GhostFrame Phishing Framework Hits Over One Million Attacks

GhostFrame is a stealthy phishing framework that hides credential-harvesting content inside an iframe served from a benign-looking HTML landing page. The kit uses dynamic randomized subdomains, anti-analysis controls (blocking right-click, F12, common shortcuts), readable and obfuscated source variants, and fallback loaders; Barracuda links it to over one million attacks and recommends layered defenses including browser updates, staff training, email/web filtering, and restricting iframe embedding.