The Gootloader malware scam, which was thought to have been disrupted and shut down in March 2025, has returned with both old ...

Huntress finds three GootLoader infections since Oct 27, 2025; two led to domain controller compromise within 17 hours.