Skip to content
brandefense.io
Request A Demo
CybercrimeFinancialAdvanced sophistication

GrayBravo

GrayBravo is a cybercrime syndicate with a financial motive, tracked by Brandefense. It uses 27 MITRE ATT&CK techniques.

Also known as
  • TAG-150
Request IOC feedRequest ATT&CK export
Techniques
27
Exploited CVEs
No CVE data
Record updated

About GrayBravo.

Primary threat actor behind CastleLoader MaaS, characterized by rapid development cycles, technical sophistication, responsiveness to public reporting, and an expanding, evolving infrastructure. Operates the MaaS and facilitates distribution of various malware families.

Last updated Jul 25, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.