Excel Exploit Fuels Surge in Remcos RAT Malware Attacks

Cybercriminals are using a new phishing campaign to spread a fileless variant of the Remcos RAT malware by exploiting a known Excel vulnerability (CVE-2017-0199). The attack begins with a phishing email containing a malicious Excel attachment that downloads and executes a fileless Remcos RAT, allowing attackers to remotely control infected systems and harvest sensitive data. Additionally, threat actors are abusing DocuSign APIs for phishing and using ZIP file concatenation to bypass security tools, highlighting evolving tactics in cybercrime.