Stay informed about the latest phishing campaigns targeting businesses in Poland, Italy, and Romania. Learn how the ModiLoader Trojan is used to deliver malicious software.
Remcos RAT
A new and sophisticated cyber attack campaign has surfaced, leveraging a weaponized Microsoft Word document to deliver the notorious Remcos RAT
This particular scheme involves the misuse of GoTo Meeting, a popular online meeting platform, to deploy the notorious Remcos Remote Access Trojan
One such group, known as UAC-0050 or "The DaVinci Group," has emerged as a key player in the ongoing conflict between Russia and Ukraine
Remcos RAT malware communicates with a remote IP address and initiates malicious activities, including keylogging and capturing screenshots
As UAC-0050 adapts and refines its tactics, utilizing services of a Malaysian provider and the autonomous system AS44477 for hosting
Recently, the group utilized the Spyder Loader as a means to disseminate the Remcos Remote Access Trojan (RAT)
Hackers disseminated phishing emails containing Remcos RAT attachments disguised as PDF files, sent by the Security Service of Ukraine