Fortinet researchers have uncovered a phishing campaign deploying a new fileless version of the Remcos Remote Administration Tool (RAT), a commercial tool used for malicious remote control of computers. Its procedure involves using a malicious Excel file disguised as an order document, exploiting a vulnerability to execute a code, stealthily downloading and activating the Remcos RAT, and maintaining its activities by adding a new auto-run item to the system registry.
WhatsApp on Windows users targeted in new campaign, warns Microsoft – Malwarebytes
WhatsApp on Windows users targeted in new campaign, warns Microsoft Malwarebytes
