Remcos RAT threat analysis on Windows including IEC 60870

Remcos is a closed-source tool that is marketed as a remote control and surveillance software by a company called Breaking Security.

網路安全公司CrowdStrike 因推出有缺陷的更新，造成使用該公司服務的Windows設備發生全球性大癱瘓。該公司現在警告，網路攻擊者藉機以提供修補程式為偽裝，向 ...

Remcos is a lightweight, fast and highly customizable Remote Administration Tool to remotely control your computers.

Remcos (acronym of Remote Control & Surveillance Software) is a commercial Remote Access Tool to remotely control computers.

Remcos is a sophisticated remote access Trojan (RAT) that can be used to fully control and monitor any Windows computer from XP and onwards.

Remcos 是一種遠端存取木馬(RAT)，也是2021 年十大惡意軟體變種之一。感染電腦後，Remcos 會為攻擊者提供後門存取受感染系統，並收集各種敏感資訊。

Windows 用戶正面臨新興威脅：經過惡意改造的Remcos 遠端管理工具正在進行一場持續性的攻擊活動，利用Microsoft Office 和WordPad 中一個已知的遠端程式 ...

駭客利用RAT發動攻擊的情況，不時有事故傳出，而最近一波攻擊行動裡，攻擊者採用了新的手法來迴避偵測，因而引起研究人員的注意。

Trojan.Remcos is Malwarebytes' detection name for a Remote Administration Tool (RAT) targeting Windows systems.