https://thehackernews.com/2025/12/four-threat-clusters-using-castleloader.html
Four Threat Clusters Using CastleLoader as GrayBravo Expands Its Malware Service Infrastructure
GrayBravo drives four CastleLoader threat clusters using phishing, malvertising, and Booking-themed lures across multiple sectors.