Malware
CASTLETAP
- First Reported
- Jul 22, 2026
- Latest Reported
- Jul 22, 2026
Reported Context (1)
- backdoors to FortiGate devices. Scripts exploited CVE-2022-41328 (directory traversal) to deploy the CASTLETAP backdoor, then pivoted to VMware ESXi hypervisors. Threat-Hunting Guide Shows How to Detect Attacks on FortiGate Appliances
CVE (5)
Threat Actors (4)
MITRE ATT&CK (9)
Vendors (2)
Products (5)
Tools (3)
Industries (1)
Countries (3)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.