Back Cybersecuritynews

Remcos RAT Masquerade as VeraCrypt Installers Steals Users Login Credentials

Cybersecuritynews •Tushar Subhra Dutta • January 19, 2026

A sophisticated malware campaign targeting South Korean users has emerged, distributing the Remcos remote access trojan (RAT) through deceptive installers disguised as legitimate VeraCrypt encryption software. This ongoing attack campaign primarily focuses on individuals connected to illegal online gambling platforms, though security experts warn that everyday users downloading encryption tools may also fall victim to […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Remcos RAT Campaign Targets South Korean Users with Trojanized VeraCrypt Installers A malware campaign has been identified that distributes the Remcos RAT disguised as VeraCrypt installers. This attack primarily targets South Korean users, particularly those involved with illegal online gambling, but poses a risk to all users downloading encryption software. 2 sources 43

Extracted Entities

Remcos RAT Masquerade as VeraCrypt Installers Steals Users Login Credentials

The full story

Extracted Entities

Attack Types (2)

Malware (1)

Tools (1)