CastleRAT and CastleLoader, active since March 2025, spread malware via phishing and GitHub repos, enabling data theft.

Resource files Unity3D packs multiple FSB5 files each containing a single sample into it's .resource files. python-fsb5 will automatically extract all samples if multiple FSB5s are found within one ...

The Python script extract_otp_secrets.py extracts one time password (OTP) secrets from QR codes exported by two-factor authentication (2FA) apps such as "Google Authenticator". The exported QR codes ...