Threat Intelligence Report

CastleRAT attack first to abuse Deno JavaScript runtime to evade enterprise security - ThreatDown by Malwarebytes

📅 March 13, 2026 📰 www.threatdown.com 🔍 0 CVE(s) referenced

CastleRAT is a highly evasive malware campaign that leverages social engineering, novel abuse of the Deno runtime, and in-memory payload delivery via steganography to achieve full system compromise while remaining virtually undetectable by traditional security tools.

vendor

🔐 Sign In to Read Full Report

You'll need to accept our Terms of Service to access the platform.

📊 Visual Mindmap

🎯 IOC Extraction

⚔️ MITRE ATT&CK TTPs

📦 STIX 2.1 Bundle