Malware4 min read
Velvet Tempest Deploys CastleRAT via ClickFix Attacks
Ransomware affiliate Velvet Tempest uses ClickFix social engineering to deploy DonutLoader and CastleRAT in 12-day intrusion linked to Termite ransomware staging.
Malware DeskMar 10, 2026