Threat actor

CastleLoader

In 2 briefs, most recently 10 December 2025. RSS for this tag

Learn more: Malpedia ↗ ThreatFox ↗ MalwareBazaar ↗

Coverage in DanSec Daily

  1. The 64M-record Barcelona data theft arrest, STAC6565 and QWCrypt attacks on Canadian firms, and Microsoft's December 2025 Patch Tuesday zero-days.
  2. The Wealthsimple breach, the Salesforce-linked attack on Proofpoint and Tanium, SAP S/4HANA CVE-2025-42957 exploitation, and CastleRAT from TAG-150.