Posté par: igor51 le août 15, 2019, 15:00:06
In July, we came across a phishing email purporting to be a new order notification, which contains a malicious attachment that leads to the remote access tool Remcos RAT (detected by Trend Micro as BKDR_SOCMER.SM). This attack delivers Remcos using an AutoIT wrapper that incorporates various obfuscation and anti-debugging techniques to evade detection, which is a common method for distributing known malware.
The post Analysis: New Remcos RAT Arrives Via Phishing Email appeared first on .
Source: Analysis: New Remcos RAT Arrives Via Phishing Email (http://feeds.trendmicro.com/~r/Anti-MalwareBlog/~3/0LUYuOv37A8/)