Essential information

Value / Name

https://catalyst.prodaft.com/public/report/understanding-current-castleloader-campaigns/overview

Confidence

100/100

Revoked

Yes

Valid from

09/12/2025 06:39

Valid until

07/01/2026 12:22

Pattern type

stix

Published

20/12/2025 20:02

Modified

07/01/2026 12:22

Author / Source

AlienVault

Description

No description.

Pattern

[url:value = 'https://catalyst.prodaft.com/public/report/understanding-current-castleloader-campaigns/overview']

Labels / Tags

Labels: booking.com castlebot castleloader castlerat clickfix logistics malware-as-a-service matanbuchus netsupport rat phishing sectoprat warmcookie

Marking (TLP)

TLP:CLEAR