When Gabe Newell and company first started building their Linux-based ark to flee to in case Microsoft ever pulled another ...

In the new campaign, Gootloader was most likely leveraged by a group known as Storm-0494, as well as its downstream operator, ...

Huntress finds three GootLoader infections since Oct 27, 2025; two led to domain controller compromise within 17 hours.