#castlerat

[ follow ]
#castleloader #graybravo #maas #phishingclickfix #clickfix #tag-150 #malware #social-engineering
Information security
fromThe Hacker News
18 hours ago

Four Threat Clusters Using CastleLoader as GrayBravo Expands Its Malware Service Infrastructure

Multiple distinct threat clusters use CastleLoader and associated CastleBot/CastleRAT tools, indicating a malware-as-a-service model and broad malware distribution.
Information security
fromTheregister
3 months ago

Double trouble with CastleRAT malware, now in C and Python

TAG-150 created CastleRAT in Python and C, using ClickFix social engineering to trick users into pasting commands that enable remote access and payload delivery.
[ Load more ]