Domain

*[.]oast[.]fun

Confidence: ai extracted

VirusTotal ↗ URLScan ↗

Source Articles 1

GhostAction Returns: Malicious “Security Audit” Workflows Now Mine Credentials from Entire Git Histories

step-security Oct 9, 2026