CastleStealer now bypasses Chrome app-bound encryption through the IElevator COM interface. https://intel.threadlinqs.com/threat/TL-2026-3056 #ThreatIntel #CastleStealer #OXLOADER #CASTLELOADER
@threadlinqs.bsky.social
@threadlinqs.bsky.social
@threadlinqs.bsky.socialCastleStealer now bypasses Chrome app-bound encryption through the IElevator COM interface. https://intel.threadlinqs.com/threat/TL-2026-3056 #ThreatIntel #CastleStealer #OXLOADER #CASTLELOADER