Cybersecurity researchers have make clear a brand new malware marketing campaign that makes use of a PowerShell-based shellcode loader to deploy a distant entry trojan known as Remcos RAT.
“Risk actors delivered malicious LNK information embedded inside ZIP archives, typically disguised as Workplace paperwork,” Qualys safety researcher Akshay Thorve mentioned in a technical report. “The assault chain leverages mshta.exe for
Fileless Remcos RAT Delivered by way of LNK Information and MSHTA in PowerShell-Primarily based Assaults
