Malware
CastleBot
- First Reported
- Oct 18, 2026
- Latest Reported
- Oct 18, 2026
Reported Context (1)
- Its design matches public descriptions of CastleLoader / CastleBot: a shellcode stager, then a PE loader, then a core bot with ChaCha20 traffic that delivers NetSupport and StealC. Malicious ISO Uses IronPython to Deliver StealC and NetSupport
Malware (2)
MITRE ATT&CK (12)
Products (11)
Tools (11)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.