Skip to content

Malware

RemoteX

Go-based Windows remote-access trojan with credential/browser-theft modules.

RemoteX is a Windows malware family.

Background

A Windows remote-access trojan written in Go that ships with modules for stealing credentials and browser data. Its features include:

  • screen capture and H.264 streaming
  • keyboard and mouse control
  • hidden desktop
  • file upload, download, and execution
  • clipboard access
  • process listing
  • Chrome profile cloning
  • cookie extraction and injection
  • logic to defeat Chrome's App-Bound protection It also bundles the ChromElevator tool.

Source: Malpedia (Fraunhofer FKIE).