Expanding the Castle: New Campaigns, New Tooling, and the NeedleStealer Connection

CastleLoader campaigns have evolved to deploy advanced Rust and Golang-based NeedleStealer payloads targeting cryptocurrency wallets and browsers, leveraging new infection chains, digitally signed installers, and sophisticated evasion techniques to expand from broad credential theft to high-value crypto attacks.