CastleLoader Malware Infects 469 Devices Using Fake GitHub Repos and ClickFix Phishing

July 24, 2025

Cybersecurity researchers have shed light on a new versatile malware loader called CastleLoader that has been put to use in campaigns distributing various information stealers and remote access trojans (RATs).
The activity employs Cloudflare-themed ClickFix phishing attacks and fake GitHub repositories opened under the names of legitimate applications, Swiss cybersecurity company PRODAFT said in

Source: Read More

Previous ArticleFire Ant Exploits VMware Flaws to Compromise ESXi Hosts and vCenter Environments

Next Article Sophos and SonicWall Patch Critical RCE Flaws Affecting Firewalls and SMA 100 Devices

Designing Better UX For Left-Handed People

This week in AI dev tools: Gemini 2.5 Flash-Lite, GitLab Duo Agent Platform beta, and more (July 25, 2025)

Tenable updates Vulnerability Priority Rating scoring method to flag fewer vulnerabilities as critical

Google adds updated workspace templates in Firebase Studio that leverage new Agent mode

I ran with the Apple Watch and Samsung Watch 8 – here’s the better AI coach

8 smart home gadgets that instantly upgraded my house (and why they work)

I tested Panasonic’s new affordable LED TV model – here’s my brutally honest buying advice

OpenAI teases imminent GPT-5 launch. Here’s what to expect

NativePHP Is Entering Its Next Phase

NativePHP Is Entering Its Next Phase

Medical Card Generator Android App Project Using SQLite

The details of TC39’s last meeting

Elden Ring Nightreign’s Patch 1.02 update next week is adding a feature we’ve all been waiting for since launch — and another I’ve been begging for, too

Elden Ring Nightreign’s Patch 1.02 update next week is adding a feature we’ve all been waiting for since launch — and another I’ve been begging for, too

The next time you look at Microsoft Copilot, it may look back — but who asked for this?

5 Open Source Apps You Can use for Seamless File Transfer Between Linux and Android

CastleLoader Malware Infects 469 Devices Using Fake GitHub Repos and ClickFix Phishing

NativePHP Is Entering Its Next Phase

Scaling Up Reinforcement Learning for Traffic Smoothing: A 100-AV Highway Deployment

Meta AI can summarize your unread WhatsApp messages now – how to try it

CVE-2025-4912 – SourceCodester Student Result Management System Image File Handler Remote Path Traversal Vulnerability

Palo Alto Networks Warns of Brute-Force Attempts Targeting PAN-OS GlobalProtect Gateways

Usermode FTP Server – access your files from another device

CVE-2025-4070 – PHPGurukul Rail Pass Management System SQL Injection Vulnerability

CVE-2025-23968 – WPCenter AiBud WP Unrestricted File Upload RCE

CVE-2025-47813 – Wing FTP Server Path Disclosure Vulnerability

CVE-2025-6951 – SAFECAM X300 FTP Service Default Credentials Vulnerability

CastleLoader Malware Infects 469 Devices Using Fake GitHub Repos and ClickFix Phishing

Related Posts