Back Gbhackers

Weaponized Shipping Documents Spread Remcos RAT in Stealthy Malware Campaign

Gbhackers •Mayura Kathir • January 21, 2026

A sophisticated phishing campaign distributing a fileless variant of Remcos RAT, a commercial remote access tool offering extensive capabilities, including system resource management, remote surveillance, network management, and agent control. The campaign initiates through phishing emails impersonating Vietnamese shipping companies, tricking recipients into opening attached Word documents under the pretense of viewing updated shipping documents. […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Phishing Campaign Uses Weaponized Shipping Documents to Distribute Remcos RAT A phishing campaign is exploiting fake shipping emails to deliver Remcos RAT, a remote access trojan. Victims are tricked into opening malicious Word documents disguised as legitimate shipping documentation, leading to unauthorized access and control over their systems. The campaign impersonates Vietnamese shipping companies to enhance its credibility. 2 sources 50

Weaponized Shipping Documents Spread Remcos RAT in Stealthy Malware Campaign

The full story

Extracted Entities

Attack Types (2)

Malware (1)