CastleRAT and CastleLoader, active since March 2025, spread malware via phishing and GitHub repos, enabling data theft.

In mid-April 2015, ESET’s Laboratory in Latin America received a report on an executable program named "Liberty2-0.exe" detected by us as Python/Liberpy.A. It was a keylogger, a threat that ...