CastleRAT and CastleLoader, active since March 2025, spread malware via phishing and GitHub repos, enabling data theft.

The study offers a blueprint for effective defense. The researchers developed a multi-layered guardrail system that ...