Bitdefender LummaStealer Infections Rise Following CastleLoader Campaigns
Article Content
Browse articles 
LummaStealer infections have surged due to social engineering campaigns utilizing the ClickFix technique to distribute CastleLoader malware. This infostealer, operating as a malware-as-a-service platform, had previously been disrupted in May 2025 when law enforcement seized 2,300 domains associated with it.
Ask AI about this cluster
Answers cite the sources they use
Updated 218d ago How this analysis works
Timeline
2025-05-01
Law enforcement seized 2,300 domains linked to LummaStealer
2026-02-11
Surge in LummaStealer infections reported
More articles in this cluster (7)
Following this threat?
Track CastleLoader in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
AI-Assisted Phishing Targets Taiwan Research Institutions An advanced persistent threat (APT) spear-phishing campaign has been identified targeting individuals affiliated with Taiwan research organizations. The campaign utilized AI-assisted content generation to create highly personalized phishing emails that impersonated reputable academic and policy institutions. Attack… 
CastleStealer Malware Enhances Capabilities with Remote Shell and Browser Bypass CastleStealer, a C# information stealer first identified in April 2026, has evolved to include remote command execution and the ability to bypass Chromium's App-Bound Encryption (ABE). New samples can collect sensitive browser data, execute commands on compromised systems, and exfiltrate stolen information via small…