Skip to content
Off-topic for aiqbench

Off-topic for aiqbench

This story was gathered from a source we follow but falls outside AI and quantum coverage, so there is no aiqbench take for it.

CastleStealer Malware Uses Browser Protection Bypass and Remote Shell to Expand Attacker Access

Cybersecurity News5 min read

CastleStealer, an emerging C#-based information stealer, has added browser protection bypass and remote shell features that give its operators a wider path into compromised Windows systems. The newer malware samples can collect browser data protected by Chromium’s App-Bound Encryption, run commands on a victim device, download extra payloads, and move stolen information through small encrypted […] The post CastleStealer Malware Uses Browser Protection Bypass and Remote Shell to Expand Attacker Access appeared first on Cyber Security News.

CastleStealer, an emerging C#-based information stealer, has added browser protection bypass and remote shell features that give its operators a wider path into compromised Windows systems. The newer malware samples can collect browser data protected by Chromium’s App-Bound Encryption, run commands on a victim device, download extra payloads, and move stolen information through small encrypted network transmissions rather than one large archive. Flashpoint’s analysis shows that the malware is becoming more capable even though it has not yet reached the broad use seen with major established stealer families. CastleStealer was first publicly…

Excerpt shown under the publisher's RSS terms · 92 words · full text and figures are on the publisher's site

Related coverage