Netskope Threat Labs

CactusTorch

ATP Sandbox Adv. Heuristics

CactusTorch is a JavaScript and VBScript shellcode launcher that spawns a 32 bit process and injects shellcode into it, giving loaders a script based path to in-memory execution.

First seen
April 2022
Last seen
October 2026
Alert Name
Document-Word.Trojan.CactusTorch
Script-JS.Trojan.CactusTorch
Script-Macro.Trojan.CactusTorch
Script-WScript.Trojan.CactusTorch