UAT-11795 deploys novel Starland RAT and bespoke WLDR C2 implant in financially motivated campaign

Cisco Talos is disclosing UAT-11795, a sophisticated, Russian-speaking, financially motivated adversary that has been conducting a malicious campaign targeting users in the U.S. and Europe since at least June 2025. Talos has discovered that the actor in this campaign delivers a Python-based remot...

New Stealthy Remcos Malware Campaigns Target Businesses and Schools

Forcepoint's X-Labs reveals Remcos malware using new tricky phishing emails from compromised accounts and advanced evasion techniques like…...

Fake Hot Fix for CrowdStrike ”crowdstrike-hotfix.zip” Spreads Remcos RAT

Beware "crowdstrike-hotfix.zip"! This fake file spreads Remcos malware, targeting LatAm CrowdStrike users. Dont download it! Learn how to…...