#castleloader

[ follow ]
#lumma #in-memory-obfuscated-malware #credential-and-cryptocurrency-theft #graybravo #maas #castlerat
Information security
fromArs Technica
2 weeks ago

Once-hobbled Lumma Stealer is back with lures that are hard to resist

CastleLoader runs in-memory and obfuscated, installs Lumma to steal credentials, files, crypto wallets, and other sensitive data via trusted platforms and simple user actions.
Information security
fromThe Hacker News
2 months ago

Four Threat Clusters Using CastleLoader as GrayBravo Expands Its Malware Service Infrastructure

Multiple distinct threat clusters use CastleLoader and associated CastleBot/CastleRAT tools, indicating a malware-as-a-service model and broad malware distribution.
[ Load more ]