cognitive cybersecurity intelligence

News and Analysis

Search

PowerShell-Based Loader Deploys Remcos RAT in New Fileless Attack

PowerShell-Based Loader Deploys Remcos RAT in New Fileless Attack

A stealthy fileless malware attack leveraging PowerShell to deploy Remcos RAT has been observed avoiding traditional antivirus systems and operating entirely in memory. The Qualys Threat Research Unit discovered the campaign, which uses a ZIP file disguised as a legitimate document. Remcos RAT deployed via the PowerShell script evades detection tools, emphasizes persistent data exfiltration to a control server, exploits webcam access, and defends against analysis with anti-debugging methods.

Source: www.infosecurity-magazine.com –

Subscribe to newsletter

Subscribe to HEAL Security Dispatch for the latest healthcare cybersecurity news and analysis.

More Posts