CastleLoader Campaign — Campaign Analysis & Threat Activity

Threat entity extracted from intelligence sources

Frequency
1
occurrences
First Seen
May 19, 2026
Last Seen
May 19, 2026

CastleLoader Campaign is a threat campaign tracked across 1 threat cluster and 1 intelligence report mention on ThreatCluster. First observed May 19, 2026; most recent activity May 19, 2026.

Related Threat Clusters

  • MSHTA Utility Exploited in Ongoing Malware Campaigns

    Bitdefender researchers have identified that the Microsoft HTML Application Host (MSHTA) utility is being actively exploited by cybercriminals to deliver a variety of malware, including infostealers and loaders. Despite…

    8 articles · Updated May 19, 2026

Recent Intelligence Reports

  • Microsoft's MSHTA Legacy Tool Still Powers Malware Campaigns on Windows — Bitdefender · May 19, 2026

Related Entities

Malware Phishing LummaStealer Campaign Amatera CastleLoader ClipBanker CountLoader Emmenhtal Loader LummaStealer PurpleFox T1059.001 - PowerShell T1059.005 - Visual Basic

CVSS v3.1 Breakdown