Researchers detail OXLOADER malware loader used in CastleStealer campaign

Researchers say a new malware loader called OXLOADER is being used to deliver CastleStealer through malicious Google ads, a fake Node.js site, and a Storj-hosted script in a campaign tracked as REF8372.