Behind the Walls: Techniques and Tactics in Castle RAT Client Malware | Splunk

CastleRAT is a sophisticated remote access trojan actively deployed in 2025, featuring stealthy C and Python variants that enable attackers to exfiltrate sensitive data, hijack user sessions, escalate privileges, and maintain persistent control over compromised Windows systems through advanced techniques like clipboard scraping, keylogging, browser hijacking, and UAC bypass.