Do Son Discover how it retrieves script.py (the info-stealer), Document.zip (Python 3.11 with required libraries), and bypass.vbs (the Python executor)
XWorm
Remcos RAT malware communicates with a remote IP address and initiates malicious activities, including keylogging and capturing screenshots
the 2023 Threat Insights Report recently published by HP Wolf Security, a significant surge in campaigns deploying RAT is recorded