_811205.png)
_e196d8.png)
_32b3d9.png)
_1c53fe.png)
Four distinct threat activity clusters have been observed leveraging a malware loader known as CastleLoader, strengthening the previous assessment that the tool is offered to other threat actors under a malware-as-a-service (MaaS) model.
The threat actor behind CastleLoader has been assigned the name GrayBravo by Recorded Future's Insikt Group, which was previously tracking it as TAG-150.
Four Threat Clusters Using CastleLoader as GrayBravo Expands Its Malware Service Infrastructure
By reporter
· 63 views
Recommended Comments
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.