สำ นักงานพัฒนาธุรกรรมทางอิเล็กทรอนิกส์
Electronic Transactions Development Agency
Groups Tools Search Statistics
Home > List all groups > List all tools > List all groups using tool RemcosRAT Search
Threat Group Cards: A Threat Actor Encyclopedia
 Tool: RemcosRAT
Names RemcosRAT
Remcos
Remvio
Socmer
Category Tools
Type Backdoor, Info stealer, Exfiltration
Description Remcos is a closed-source tool that is marketed as a remote control and surveillance software by a company called Breaking
Security. Remcos has been observed being used in malware campaigns.
Information MITRE ATT&CK Malpedia AlienVault OTX Last change to this tool card: 27 December 2024
Download this tool card in JSON format
All groups using tool RemcosRAT
Changed Name Country Observed
APT groups
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=2463414b-7294-4e18-9b34-276292047462
Page 1 of 2

↑
  APT 33, Elfin, Magnallium 2013-Apr 2024  
  Blind Eagle 2018-Nov 2024  
  Gamaredon Group 2013-Feb 2025
  Gorgon Group 2017-Jul 2020  
  LazyScripter [Unknown] 2018  
  OPERA1ER [Unknown] 2016-Jul 2023
  Operation Comando [Unknown] 2018  
  Operation Spalax [Unknown] 2020  
  RATicate [Unknown] 2019  
  TA2722 [Unknown] 2020  
  TA558 [Unknown] 2018-Jun 2023  
  Vendetta, TA2719 2020  
12 groups listed (12 APT, 0 other, 0 unknown)
Infrastructure and Security Department
Electronic Transactions Development Agency
Follow us on
 
Report incidents
+66 (0)2-123-1227
helpdesk@etda.or.th
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=2463414b-7294-4e18-9b34-276292047462
Page 2 of 2