Threat actor
TAG-160
Tracked by CyberSIXT since 10 Dec 2025
- Articles · all time
- 1
- Articles · last 30 days
- 0
- CVEs exploited · attributed · all time
- 0
- Research reports · all time
- 0
Names and sources
- TAG-160
- Named by CyberSIXT coverage
- tag160
- Named by CyberSIXT coverage
- GrayBravo MaaS Deploys CastleRAT Backdoor, Hiding C2 with Steam Profile Dead Drop ResolversSecurityOnline
- Four Threat Clusters Using CastleLoader as GrayBravo Expands Its Malware Service InfrastructureThe Hacker News · first in our coverage