Obsidian Plugin Abuse Delivers PHANTOMPULSE RAT in Targeted Finance, Crypto Attacks

A new malware campaign is targeting financial and cryptocurrency sectors by weaponizing a plugin for Obsidian, the popular note-taking application. Attackers are deploying PHANTOMPULSE RAT, a remote access trojan, through malicious Obsidian plugins to gain unauthorized access to victims' systems. The campaign represents an emerging trend where threat actors exploit legitimate productivity tools to deliver malware and compromise sensitive financial data.