Tag
Fileless Multi-Stage Remcos RAT via Phishing
2 rules 4 TTPsA fileless multi-stage Remcos RAT is delivered via phishing, achieving memory-resident execution, but specific technical details are not provided in this brief.
Maltrail IOCs for Remcos RAT and EK_ClearFake
3 rules 2 TTPs 49 IOCsThis brief summarizes IOCs related to Remcos RAT, a remote access trojan, and EK_ClearFake, an exploit kit, as identified by Maltrail on February 26, 2026.
Detecting Remcos RAT Activity Through File and Registry Traces
3 rules 3 TTPs 6 IOCsThis brief provides detection strategies for Remcos RAT, focusing on file and registry artifacts indicative of its presence, persistence, and potential cleanup activities on Windows systems, allowing for the identification and remediation of compromised hosts.
Remcos RAT Activity Detection
3 rules 3 TTPsThis brief outlines detection strategies for Remcos RAT activity, focusing on file and registry artifacts indicative of installation, persistence, and cleanup on compromised Windows systems.