Hackers Use Steganographic Loader to Deliver Remcos RAT via Phishing Attachments

Security researchers have uncovered a sophisticated phishing campaign delivering the Remcos Remote Access Trojan (RAT) . Attackers are using financial lures, such as fake tax and payment documents, to trick victims into downloading a malicious archive. Once opened, the attack relies entirely on fileless execution and steganography to sneak past traditional security tools without leaving a trace on the hard drive. The attack begins when a user extracts the phishing attachment,…

Diamond Model