Cybersecurity Researchers Identify Tactical Similarities Between RomCom RAT and TransferLoader Groups

Cybersecurity researchers have reported tactical similarities between the threat actors behind the RomCom RAT and a group observed distributing a loader named TransferLoader. The enterprise security company Proofpoint tracks the activity related to TransferLoader under the name UNK_GreenSec and the RomCom RAT actors under the name TA829. The latter is also known by other names.