CastleRAT and CastleLoader, active since March 2025, spread malware via phishing and GitHub repos, enabling data theft.

Security researchers found malware packages using the Ethereum blockchain to conceal malicious commands on GitHub repos.

Pro tip, don't install PowerShell commands without approval A team of data thieves has doubled down by developing its ...

Malware targeting Ethereum smart contracts is not entirely new. Earlier this year, the North Korean-affiliated Lazarus Group ...