Back Asec.Ahnlab

Guloader Malware Being Disguised as Employee Performance Reports

Asec.Ahnlab •ATCP • January 8, 2026

AhnLab SEcurity intelligence Center (ASEC) recently discovered the Guloader malware being distributed via phishing emails disguised as an employee performance report. The email claims to be informing the recipient the report for October 2025, and prompts the recipient to check the attachment by mentioning the plan to dismiss some employees. Figure 1. Phishing email […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Guloader Malware Spread via Phishing Emails Disguised as Performance Reports A new phishing campaign is distributing Guloader malware through emails that appear to be employee performance reports for October 2025. The emails claim to inform recipients about potential dismissals, prompting them to open malicious attachments. Organizations are being warned about this tactic used by threat actors to compromise systems. 5 sources 37

Guloader Malware Being Disguised as Employee Performance Reports

The full story

Extracted Entities

Attack Types (2)

Malware (1)