CyberSecurityBoardThreat Intel · CVEs · Products
Attack Groups

GrayBravo: Threat Activity Cluster Behind CastleLoader and CastleStealer

June 25, 2026

GrayBravo is a threat activity cluster attributed to distributing CastleLoader and CastleStealer malware. The group is known for using ClickFix-style lures and malicious advertising campaigns to deliver information stealers.