New Phishing Campaign Exploits Fileless Remcos RAT Malware Variant in Sophisticated Attack: Fortinet Research Reveals - CloudSEK News
Tags
country: Russia
maec-delivery-vectors: Watering Hole
attack-pattern: Data Clipboard Data - T1414 Exploits - T1587.004 Exploits - T1588.005 Javascript - T1059.007 Malware - T1587.001 Malware - T1588.001 Mshta - T1218.005 Phishing - T1660 Phishing - T1566 Powershell - T1059.001 Process Hollowing - T1055.012 Server - T1583.004 Server - T1584.004 Software - T1592.002 System Services - T1569 Visual Basic - T1059.005 Tool - T1588.002 Vulnerabilities - T1588.006 Mshta - T1170 Powershell - T1086 Process Hollowing - T1093
Show in Graph
Common Information
Type Value
UUID 9e7d1682-34a8-4842-8748-ff13ae3822f9
Fingerprint 85608daa3325dfc3
Analysis status DONE
Considered CTI value 0
Text language
Published Nov. 11, 2024, 2:19 a.m.
Added to db Nov. 11, 2024, 8:26 a.m.
Last updated Nov. 17, 2024, 6:54 p.m.
Headline New Phishing Campaign Exploits Fileless Remcos RAT Malware Variant in Sophisticated Attack: Fortinet Research Reveals
Title New Phishing Campaign Exploits Fileless Remcos RAT Malware Variant in Sophisticated Attack: Fortinet Research Reveals - CloudSEK News
Detected Hints/Tags/Attributes 61/3/3
Source URLs
Redirection Url
Details Source https://news.cloudsek.com/2024/11/new-phishing-campaign-exploits-fileless-remcos-rat-malware-variant-in-sophisticated-attack-fortinet-research-reveals/
Details Source https://news.cloudsek.com/2024/11/new-phishing-campaign-fileless-remcos-rat/
URL Provider
Details Provider Source level domain
Details cloudsek.com news.cloudsek.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 495 ✔ CloudSEK News https://news.cloudsek.com/feed/ 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details CVE 269 
cve-2017-0199
Details File 456 
mshta.exe
Details IPv4 3 
192.3.220.22