XWorm, Remcos RAT Evade EDRs to Infect Critical Infrastructure

Disguised as harmless PDF documents, LNK files trigger a PowerShell script, initiating a Rust-based injector called Freeze[.]rs and a host of malware infections.

Threat Intel Reports

Rust-Based Injector Deploys XWorm and Remcos RAT in Multi-Stage Attack

Phishing Campaigns Employ New Python RAT Malware to Target Windows

Securonix Threat Labs Monthly Intelligence Insights – April 2023 - Securonix

Password-protected Excel spreadsheet pushes Remcos RAT - SANS Internet Storm Center

REMCOS RAT Infection – Malware Analysis

Cybereason creates 'vaccine' to stop Remcos RAT

Black Arrow Cyber Consulting — Black Arrow Cyber Threat Intelligence Briefing 18 August 2023

ARANET LLC.: [New post] Experts Uncover Weaknesses in PowerShell Gallery Enabling Supply Chain Attacks

Mike Boyle on LinkedIn: XWorm, Remcos RAT Evade EDRs to Infect Critical Infrastructure

Écoute le podcast This Week in Enterprise Tech (Audio)