Beware of Weaponized Employee Performance Reports that Deploys Guloader Malware

Cybersecuritynews •Tushar Subhra Dutta • January 12, 2026

Cybersecurity threats continue to evolve with attackers using more creative social engineering techniques to target organizations. A recent threat has emerged involving the Guloader malware, which is being disguised as employee performance reports to trick users into downloading and executing malicious files. This sophisticated attack vector exploits human trust and workplace familiarity to distribute dangerous […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Guloader Malware Spread via Phishing Emails Disguised as Performance Reports A new phishing campaign is distributing Guloader malware through emails that appear to be employee performance reports for October 2025. The emails claim to inform recipients about potential dismissals, prompting them to open malicious attachments. Organizations are being warned about this tactic used by threat actors to compromise systems. 5 sources 37

Beware of Weaponized Employee Performance Reports that Deploys Guloader Malware

The full story

Extracted Entities

Attack Types (1)

Malware (1)