Back Malware-Traffic-Analysis

2026-01-22: SmartApeSG uses ClickFix technique to push Remcos RAT

Malware-Traffic-Analysis • January 29, 2026

Share: View original

Shown above: Example of a legitimate but compromised site showing the SmartApeSG fake CAPTCHA page.

Shown above: Traffic from an infection filtered in Wireshark.

Shown above: Remcos RAT infection persistent on an infected Windows host.

to return to the main page.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

SmartApeSG Deploys Remcos RAT via ClickFix Technique SmartApeSG has utilized the ClickFix technique to distribute the Remcos RAT, leveraging a fake CAPTCHA page on compromised legitimate sites. The malware targets Windows hosts, allowing persistent infections. Traffic analysis from the infections has been documented using Wireshark. 2 sources 42

Extracted Entities

Attack Types (1)

Malware (1)

Platforms (1)