Skip to content

Malware

Remcos

aka RemcosRAT · Remvio · Socmer

Remcos (acronym of Remote Control & Surveillance Software) is a commercial Remote Access Tool to remotely control computers.

Remcos, also known as RemcosRAT, Remvio, Socmer, is a Windows malware family operated by APT33, The Gorgon Group and others.

Background

Remcos, short for Remote Control & Surveillance Software, is a commercial Remote Access Tool used to operate computers from a distance.

Though marketed as legitimate software for surveillance and penetration-testing work, it has featured in many malicious campaigns. After it is installed, Remcos sets up a backdoor that hands the remote operator complete control of the machine. The tool is produced by the cybersecurity firm BreakingSecurity.


Source: Malpedia (Fraunhofer FKIE).