Gbhackers

Phishing Campaign Uses Weaponized Shipping Documents to Distribute Remcos RAT

First seen 22 Jan 2026, 02:59 UTC • Gbhackers

•49.7

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

A phishing campaign is exploiting fake shipping emails to deliver Remcos RAT, a remote access trojan. Victims are tricked into opening malicious Word documents disguised as legitimate shipping documentation, leading to unauthorized access and control over their systems. The campaign impersonates Vietnamese shipping companies to enhance its credibility.

How this analysis works

Attack Flow

Continue Reading

Russian UAT-11795 Targets Users with Trojans in Legitimate Software VHDX Files Exploited to Deploy Remcos RAT via Multi-Stage Attack Formbook Malware Campaign Targets Organizations with Advanced Phishing Techniques New Remcos RAT Campaign Exploits CVE-2017-11882 via Phishing Cruciferra Crypter Service Powers Multiple Cybercrime Campaigns SmartApeSG Campaign Distributes Multiple RATs via ClickFix Technique

Phishing Campaign Uses Weaponized Shipping Documents to Distribute Remcos RAT

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading