Threat Intelligence / Actor / GhostClaw Operator

GhostClaw Operator

Nation: N/A · 1 tracked threat(s) · Categories: MALWARE

Also known as: helenigtxu, michelleoincx, elizabethasicb, Sectionnaenumerate, deborahikssv, antigravity-sdk, FinPyromancerLog, Crestdrasnip, Heartflabrace

Tracked threats

GhostClaw Supply Chain Campaign: Malicious GitHub Repos and AI Workflow SKILL.md Files Deliver GhostLoader macOS Infostealer via trackpipe[.]dev C2 — HIGH

Full actor intelligence — infrastructure, IOCs, detection coverage and operator fingerprints — is available via the Threadlinqs MCP server (Purple tier). View plans →

Threadlinqs Intelligence