CyberSecurityBoardThreat Intel · CVEs · Products
Malware

CastleLoader: Malware Loader Associated with GrayBravo

June 25, 2026

CastleLoader is a malware loader used by the GrayBravo threat cluster to deliver payloads such as CastleStealer. It has been observed in campaigns using ClickFix-style lures masquerading as free tools.