A “novel” social engineering campaign has been observed abusing Obsidian, a cross-platform note-taking application, as an initial access vector to distribute a previously undocumented Windows remote access trojan called PHANTOMPULSE in attacks targeting individuals in the financial and cryptocurrency sectors.
Dubbed REF6598 by Elastic Security Labs, the activity has been found to leverage –
Read More – The Hacker News

![[Webinar] Find and Eliminate Orphaned Non-Human Identities in Your Environment AttackFeed by Joe Wagner | [Webinar] Find and Eliminate Orphaned Non-Human Identities in Your Environment - The Hacker News](https://attackfeed.com/wp-content/uploads/2026/04/ghost-lkE03u.jpg)

