Fake Employee Performance Reports Deliver Guloader Malware

Gbhackers •Mayura Kathir • January 12, 2026

Organizations are being warned a new phishing campaign that weaponizes fake employee performance reports to deploy the Guloader malware and ultimately install Remcos RAT on compromised systems. In the observed cases, threat actors send phishing emails that purport to an employee performance report for October 2025. The email body claims that management is […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Guloader Malware Spread via Phishing Emails Disguised as Performance Reports A new phishing campaign is distributing Guloader malware through emails that appear to be employee performance reports for October 2025. The emails claim to inform recipients about potential dismissals, prompting them to open malicious attachments. Organizations are being warned about this tactic used by threat actors to compromise systems. 5 sources 37

Extracted Entities

Fake Employee Performance Reports Deliver Guloader Malware

The full story

Extracted Entities

Attack Types (1)

Malware (2)

MITRE ATT&CK (1)