New Malware Campaign Delivers Remcos RAT Through Multi-Stage Windows Attack
SHADOW#REACTOR uses obfuscated VBS, PowerShell fragment fetching, .NET Reactor reflective loading, and MSBuild LOLBin to deploy Remcos RAT for covert persistent access.
Russia-Aligned Hackers Abuse Viber to Target Ukrainian Military and Government
UAC-0184 uses Viber to distribute malicious ZIPs containing LNK files that deploy Hijack Loader and enable Remcos RAT intrusions against Ukrainian military and government targets.