Remcos Rat Persistence By Registry

nomit vyas@xoxo

•updated Jan 29, 2026•0•24

Detects potential Remcos RAT installation by correlating the creation of an executable in a user's AppData directory with the creation of a registry run key for persistence.