XWorm, Remcos RAT Evade EDRs to Infect Critical Infrastructure

Disguised as harmless PDF documents, LNK files trigger a PowerShell script, initiating a Rust-based injector called Freeze[.]rs and a host of malware infections.

Hacking in Plain Sight: Chinese Cyber Threats Amplified with DNS-over-HTTPS - Esentry

The Persistent Danger of Remcos RAT - CYFIRMA

Password-protected Excel spreadsheet pushes Remcos RAT - SANS Internet Storm Center

Password-protected Excel spreadsheet pushes Remcos RAT - SANS Internet Storm Center

Defending America's Critical Infrastructure - America's Electric Cooperatives

Sudipt Ghatak on LinkedIn: XWorm, Remcos RAT Evade EDRs to Infect Critical Infrastructure

This Week in Enterprise Tech (Audio) - Podcasts on Audible

Malspam pushes ModiLoader (DBatLoader) infection for Remcos RAT - SANS Internet Storm Center

REMCOS RAT Infection – Malware Analysis

Securonix Threat Labs Monthly Intelligence Insights – April 2023 - Securonix

Remco's RAT, AMSI killing in the wild and defender evasion. – Laskowski-Tech