Breach404
Back to Insights
Cybersecurity2 min readApril 16, 2026

Obsidian Plugin Abuse Delivers PHANTOMPULSE RAT in Targeted Finance, Crypto Attacks

Attackers are exploiting Obsidian note-taking application plugins to deliver PHANTOMPULSE remote access malware, specifically targeting professionals in finance and cryptocurrency sectors. Organizations using Obsidian should audit installed plugins for su

Attackers are exploiting Obsidian note-taking application plugins to deliver PHANTOMPULSE remote access malware, specifically targeting professionals in finance and cryptocurrency sectors. Organizations using Obsidian should audit installed plugins for su

Read the full article: https://thehackernews.com/2026/04/obsidian-plugin-abuse-delivers.html

Could your website be vulnerable to attacks like this?

Run a free 10-point security scan on your site — headers, SSL, DNS, and more. Results in 15 seconds.

Test Your Site Now — It's Free