
New Malware Campaign "SHADOW#REACTOR" Deploys Remcos RAT via Multi-Stage Attack Chain
CybersecurityMalwareRemoteAccessToolsHackingThreatIntelligenceWindowsSecurity
Cybersecurity researchers have uncovered a malicious campaign named SHADOW#REACTOR, which employs a multi-stage attack chain to deploy Remcos RAT, a commercial remote administration tool. The infection begins with an obfuscated VBS launcher executed via wscript.exe, following a tightly orchestrated execution path. The goal is to establish persistent and stealthy remote access on Windows systems. No specific targets, exact dates, or quantified impact are mentioned.