Astaroth keylogger is a banking Trojan that uses GitHub-hosted configuration files to redirect infected hosts to new command-and-control servers when its primary servers are taken down, enabling continued credential theft
