NightshadeC2 (Windows)
CastleRAT
According to eSentire, NightshadeC2 demonstrates an extensive capability set, including: Reverse shell via Command Prompt/PowerShell; Download and execute DLL or EXE; Self-deletion; Remote control; Screen capture; Hidden web browsers; Keylogging; clipboard content capturing. Certain variants have been found with stealing capabilities that enable the extraction of browser passwords and cookies… Source: MISP
Activity on Jábega · 12 weeks
4 stories · first seen on 12 Nov 2026 · last seen on 13 Nov 2026
News
- Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen LoginsThe Hacker News · 13 Nov 2026
- Law Enforcement Disrupts Gootloader, CastleRAT, and StealC InfrastructureSecurityWeek · 13 Nov 2026
- Police dismantles Gootloader, CastleRAT, StealC malware infrastructureBleepingComputer · 12 Nov 2026
- 6.4 million victim datasets secured in international operation against malware networksEuropol · 12 Nov 2026
Appears alongside
Relationships come from co-occurrence in the news, not attribution. Sources: MISP galaxy and SigmaHQ. malpedia.caad.fkie.fraunhofer.de ↗