All threat actorsAlert me
TAG160
A Recorded Future tracking cluster related to GrayBravo's CastleLoader ecosystem and focused on logistics and transportation. It uses phishing that impersonates freight companies or industry platforms, including ClickFix-style lures, to deliver loaders and follow-on malware.
Create a free account to see the reports
Sign in or create a free account to see every report that names TAG160.
Create free account