In the new campaign, Gootloader was most likely leveraged by a group known as Storm-0494, as well as its downstream operator, ...

The Gootloader malware scam, which was thought to have been disrupted and shut down in March 2025, has returned with both old ...