Astaroth Banking Malware Abuses GitHub for Resilient Configurations

Astaroth Banking Malware Abuses GitHub for Resilient Configurations

The Astaroth banking trojan has resurfaced, utilizing GitHub as a platform for malware configuration updates. This sophisticated malware employs targeted phishing tactics to steal banking and cryptocurrency credentials while evading detection through advanced techniques.
Oct 14, 2025 Actor: Astaroth malware group Sector: Banking and Cryptocurrency Region: South America