GhostCode: Dissecting a Novel Device Code Phishing Kit

Reported 16 Sep 2026 by otx · Severity: medium

In late August 2026, a sophisticated device code phishing campaign was identified, distributed through web contact forms. Threat actors impersonated procurement officers from legitimate businesses, specifically BJ's Wholesale Club, using lookalike domains registered with Zoho Mai