Gootloader Malware Returns with Fake NDA Scam

First seen 11 Jan 2026, 04:51 UTC • Techradar

•40

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

Gootloader malware has resurfaced, utilizing malvertising and SEO poisoning to spread infections. Cybercriminals are employing deceptive tactics to obfuscate malware names and lure victims into scams involving fake non-disclosure agreements (NDAs).

Ask AI about this cluster

Answers cite the sources they use

How this analysis works

Continue Reading

Widespread Abuse of ScreenConnect to Deploy AsyncRAT via Fake Installers Spearphishing Campaigns Exploit Malicious Links for User Execution GrayAlpha Threat Actor Uses MaskBat Loader for NetSupport RAT Deployments Gootloader Malware Resurgence Leads to Domain Controller Compromise Gootloader Malware Resurfaces with Advanced Evasion Techniques GootLoader Malware Resurfaces to Target WordPress Users with Font Hack

Gootloader Malware Returns with Fake NDA Scam

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading