Remcos RAT Spreading Through Adult Games in New Attack Wave
ID: e1427ff2-d066-5962-8f76-38e38ad6628d
STIX ID: report--e1427ff2-d066-5962-8f76-38e38ad6628d
Feed Name: The Hacker News
Threat Score
Reports from AhnLab and other analysts describe a campaign in South Korea where attackers distribute Remcos RAT via popular webhard file-sharing sites by disguising malicious packages as adult-themed games; a Visual Basic script executes an intermediate "ffmpeg.exe" binary which then downloads Remcos, a multifunctional remote access trojan capable of keylogging, audio recording, screenshots, UAC bypass, persistence, and data exfiltration.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.