Castle

Threat Actor updated 2 months ago (2024-11-29T13:13:25.726Z)
Download STIX
Preview STIX
Castle is a threat actor identified in the cybersecurity industry, responsible for the execution of actions with malicious intent. The Castle campaign has been linked to another threat group known as Iron Liberty, due to similarities in their target sectors and techniques. Both groups have been noted for targeting the energy sector, specifically Industrial Control System (ICS) companies, and for using similar methods, such as the deployment of energy industry Software Weaknesses and Configuration issues (SWCs). Despite some third parties suggesting that Castle and Iron Liberty are separate entities due to differences in their campaigns, CTU researchers have found enough common ground to link them together. The base of operations for Castle seems to be located at 1209 Orange Street, Corporation Trust Center, Wilmington, New Castle, Delaware 19801 USA, with a key contact being David Correa at the same address. This location appears multiple times in the information provided, suggesting its importance in the operations of the Castle threat actor. The mention of Barry Laing, Castle Cove Governor of the Reserve Bank, and Michele Bullock, Reserve Bank Governor, might suggest potential targets or affiliates, although this requires further investigation. In an unrelated incident, a security breach occurred at Windsor Castle involving a 21-year-old individual named Chail. He was sentenced to nine years for breaking into the castle with a crossbow, declaring his intention to kill the Queen. While this event involves a castle, it does not seem to be directly related to the activities of the Castle threat actor group.
Description last updated: 2024-05-04T20:05:29.351Z
Aliases We are not currently tracking any aliases
Miscellaneous Associations
Other elements of context that could aid in the identification of relevance
Analyst Notes & Discussion
Be the first to leave your mark here! Log in to share your views and vote.
Source Document References
Information about the Castle Threat Actor was read from the documents corpus below. This display is limited to 20 results, create a free account to see more
PreviewSource LinkCreatedAtTitle
CERT-EU
a year ago
CERT-EU
a year ago
CERT-EU
a year ago
CERT-EU
a year ago
CERT-EU
a year ago
BankInfoSecurity
a year ago
CERT-EU
a year ago
CERT-EU
a year ago
CERT-EU
a year ago
CERT-EU
a year ago
CERT-EU
a year ago
CERT-EU
a year ago
CERT-EU
a year ago
CERT-EU
2 years ago
CERT-EU
a year ago
CERT-EU
a year ago
CERT-EU
2 years ago
CERT-EU
a year ago
CERT-EU
a year ago
CERT-EU
a year ago