Security Update News
Update Information
| Title | CastleLoader Malware Infects 469 Devices Using Fake GitHub Repos and ClickFix Phishing |
|---|---|
| Update ID | THN:EAAC97465E96F6CD4DD9BB0E9C135CCD |
| Type | thn |
| Published | 2025-07-24T15:13:00 |
| Last Updated | 2025-07-24T15:30:45 |
Security Impact
| Severity | NONE |
|---|
AI Analysis
| AI Description | CastleLoader is a sophisticated malware loader that distributes various information stealers and RATs. It uses phishing attacks and fake GitHub repositories to infect devices. The loader employs dead code injection and connects to a C2 server to download modules, making it a flexible tool for attackers. |
|---|---|
| AI Severity | Critical |
| AI Vendor | Threat Actor |
| AI Product | CastleLoader |
| AI Version | Unknown |
Update Details
…