Jun 232026 New OXLOADER Loader Uses Malicious Google Ads to Deliver CastleStealer Researchers detail REF8372, a malvertising campaign using fake Node.js ads, Storj-hosted payloads, and OXLOADER to deploy CastleStealer.
