malware
New OXLOADER Loader Uses Malicious Google Ads to Deliver CastleStealer
Medium
Summary
A new malware loader, dubbed OXLOADER, is being used to distribute the CastleStealer information stealer through malicious Google Ads. The campaign, codenamed REF8372, leverages deceptive advertising and PowerShell execution to deliver the payload, employing sophisticated obfuscation techniques to evade detection. This activity highlights the ongoing use of legitimate services like Storj by threat actors to conceal malicious operations.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data