Threat actor
TAG-150
Tracked by CyberSIXT since 9 Sep 2025 · last activity 24 Jul
Also GrayBravoMalpedia
- CVEs exploited · attributed
- 0
- CVEs also mentioned · not attributed
- 0
- articles · all time
- 2
No articles in the last 45 daysThe latest: SecurityOnline, Fri 24 Jul, 10:00 UTC.See the full timeline
CVEs
No CVE is named alongside TAG-150 in CyberSIXT coverage.
- Financial Firm Hit by ClickFix, DenoRAT and NightshadeC2SecurityOnline
- From CastleLoader to CastleRAT: TAG-150’s Multi-Tiered Cyber Arsenal ExpandsSecurityOnline · first in our coverage