Hackers Impersonate Ghidra, dnSpy, and SpiderFoot to Spread Malware