ROMCOM RAT (Malware Family) By Fraunhofer FKIE Archived: 2026-04-05 15:35:06 UTC Unit 42 observed threat actor Tropical Scorpius using this RAT in operations where also Cuba ransomware was deployed. [TLP:WHITE] win_romcom_rat_auto (20251219 | Detects win.romcom_rat.) Source: https://malpedia.caad.fkie.fraunhofer.de/details/win.romcom_rat https://malpedia.caad.fkie.fraunhofer.de/details/win.romcom_rat Page 1 of 1