■■■■□ Fileless Remcos RAT Delivered via LNK Files and MSHTA in PowerShell-Based Attack.
Cybersecurity researchers have shed light on a new malware campaign that makes use of a PowerShell-based shellcode loader to deploy a remote access trojan called Remcos RAT.
https://thehackernews.com/2025/05/fileless-remcos-rat-delivered-via-lnk.html