Tagged: CastleLoader

December 13, 2025

CastleLoader PhaaS: GrayBravo Escalates Attacks on Logistics & Booking.com

The cybercriminal group GrayBravo, formerly known as TAG-150, continues to evolve at a rapid pace, demonstrating a high degree of technical sophistication, operational flexibility, and an ability to scale its infrastructure. A new investigation...

Malware

July 28, 2025

CastleLoader Unleashed: New Stealthy Malware Loader Leverages ClickFix & Fake GitHub for Widespread Infections

In the first half of 2025, researchers observed the active exploitation of a new malware loader known as CastleLoader. Since its emergence, this tool has become a central element in the distribution infrastructure for...