Remcos RAT Malware Detection via AV/EDR Signature Match

Duo Tech@duotech

•updated Jul 16, 2026•1•0•1

This rule detects the presence of Remcos Remote Access Trojan (RAT) by matching known malware family signatures identified by antivirus software. Remcos RAT is frequently used by adversaries for unauthorized system control, data exfiltration, and surveillance.