Discover how a new Remcos RAT campaign uses DonutLoader shellcode, AutoIt staging, LOLBins, and in-memory execution to evade detection. G Data analysts reveal the full multi-stage infection chain, from phishing email to process injection and Remcos RAT 7.2.1 Pro deployment.

Sign in to keep reading the full article.

Covered in 1 article

This Week In 4n6·

Deceptively Sweet: DonutLoader Reloaded in a modern Remcos RAT Infection (opens in new tab)

Covered in 1 article

Week 22