New IDAT Loader Attacks Using Steganography to Deploy Remcos RAT

Ukrainian entities based in Finland have been targeted as part of a malicious campaign distributing a commercial remote access trojan known as Remcos RAT using a malware loader called IDAT Loader.
The attack has been attributed to a threat actor tracked by the Computer Emergency Response Team of Ukraine (CERT-UA) under the moniker UAC-0184.
"The attack, as part of the IDAT Loader, used

access actor attack attacks called campaign cert cert-ua commercial computer computer emergency response team deploy emergency entities finland loader malicious malware rat remcos remcos rat remote access remote access trojan response steganography team threat threat actor trojan ukraine ukrainian