CastleRAT and CastleLoader, active since March 2025, spread malware via phishing and GitHub repos, enabling data theft.

Python script to decrypt aoe2campaign.gpv files, and two methods of extracting the AES keys to do so. - Niedzielan/aoe2_gpv_decrypt_py ...

The Python script extract_otp_secrets.py extracts one time password (OTP) secrets from QR codes exported by two-factor authentication (2FA) apps such as "Google Authenticator". The exported QR codes ...