Jul 26, 2025
CastleLoader’s Sneaky New Tricks Target Developers
A dangerous malware campaign is spreading through fake GitHub repos and bogus Cloudflare pages, tricking users into pasting malicious PowerShell commands. Once run, CastleLoader pulls in info stealers and RATs like RedLine and HijackLoader — and hundreds of victims are already compromised.
Source: Prodaft
Read more: CyberSecBrief