XWorm, Remcos RAT Evade EDRs to Infect Critical Infrastructure

Disguised as harmless PDF documents, LNK files trigger a PowerShell script, initiating a Rust-based injector called Freeze[.]rs and a host of malware infections.

Rust-Based Injector Deploys XWorm and Remcos RAT in Multi-Stage Attack

Remco's RAT, AMSI killing in the wild and defender evasion. – Laskowski-Tech

XWorm and Remcos RAT Evade EDRs to Penetrate Critical Infrastructure

Password-protected Excel spreadsheet pushes Remcos RAT - SANS Internet Storm Center

Insights Preview

Daniel Sherry on LinkedIn: XWorm, Remcos RAT Evade EDRs to Infect Critical Infrastructure

Hundreds of new cyber security simulations to keep you safe from the latest threats.

Cybereason creates 'vaccine' to stop Remcos RAT

COVID19 pandemic is a field day for cybercriminals

OSINTer - Article List

The Persistent Danger of Remcos RAT - CYFIRMA

Attackers Distribute Malware via Freeze.rs And SYK Crypter

Defending America's Critical Infrastructure - America's Electric Cooperatives

Webworm Hackers Using Modified RATs in Latest Cyber Espionage Attacks

REMCOS: A New RAT In The Wild