GrayBravo’s CastleLoader Activity Clusters Target Multiple Industries

GrayBravo, a rapidly evolving threat actor, is operating a sophisticated malware-as-a-service ecosystem—CastleLoader—used by multiple distinct clusters to target industries like logistics and hospitality with advanced phishing, malvertising, and custom tooling, highlighting the urgent need for sector-specific cyber defenses.