A team of data thieves has doubled down by developing its CastleRAT malware in both Python and C variants. Both versions ...

Python 3.13 introduced the first public, if experimental, “free-threaded” or “no-GIL” builds of the language, which we’ll call “3.13t.” 3.13t allows CPU-bound Python threads to run with true ...

CastleRAT and CastleLoader, active since March 2025, spread malware via phishing and GitHub repos, enabling data theft.