Available in both Python and C variants, CastleRAT's core functionality consists of collecting system information, downloading and executing additional payloads, and executing commands via CMD and PowerShell," Recorded Future Insikt Group said.
"There are definitely some groups that are using AI to aid with the development of ransomware and malware modules, but as far as Recorded Future can tell, most aren't," says Allan Liska, an analyst for the security firm Recorded Future who specializes in ransomware. "Where we do see more AI being used widely is in initial access."