> Termite ransomware breaches linked to ClickFix CastleRAT attacks
[AUTHOR: Bill Toulas]
[DATE: 07/03/2026 16:14]
[LANGUAGE: EN]
Ransomware threat actors tracked as Velvet Tempest are using the ClickFix technique and legitimate Windows utilities to deploy the DonutLoader malware and the CastleRAT backdoor. [...]