⤷ Title: OXLOADER Malware Loader Spreads CASTLESTEALER via Fake Node.js Ads
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 26 Jun 2026 07:16:06 +0000
════════════════════════
⌗ Tags: #Malware #CASTLESTEALER #Elastic Security Labs #Infostealer #malicious Google Ads #Malvertising #malware loader #OXLOADER #REF8372
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 26 Jun 2026 07:16:06 +0000
════════════════════════
⌗ Tags: #Malware #CASTLESTEALER #Elastic Security Labs #Infostealer #malicious Google Ads #Malvertising #malware loader #OXLOADER #REF8372
Daily CyberSecurity
OXLOADER Malware Loader Spreads CASTLESTEALER via Fake Node.js Ads
The OXLOADER malware loader spreads via malicious Google Ads, dropping the CASTLESTEALER infostealer with heavy obfuscation and anti-VM checks.