Huntress finds three GootLoader infections since Oct 27, 2025; two led to domain controller compromise within 17 hours.
Attackers are incorporating personal details like full names and phone numbers in scam emails to appear credible and induce ...