Skip to content
Threat Feed
Subscribe

Tag

Drive-by Download

1 brief RSS
high advisory

CastleLoader Malware Loader and ClearFake Activity in July 2026

Red Canary reports heightened activity of the CastleLoader malware loader, which uses paste-and-run techniques and legitimate tools to deliver infostealers and RATs, alongside continued prevalence of the ClearFake activity cluster in June 2026.

malware loader infostealer remote-access-trojan paste-and-run drive-by download windows
3r 7t 7i