Skip to content
Remcos RAT Campaign Targets South Korean Users with Trojanized VeraCrypt Installers

Remcos RAT Campaign Targets South Korean Users with Trojanized VeraCrypt Installers

First seen 20 Jan 2026, 02:03 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •March 12, 2026 at 13:27 UTC

A malware campaign has been identified that distributes the Remcos RAT disguised as VeraCrypt installers. This attack primarily targets South Korean users, particularly those involved with illegal online gambling, but poses a risk to all users downloading encryption software.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 197d ago How this analysis works

More articles in this cluster (2)

Following this threat?

Track Remcos in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed