RomCom RAT Attack Analysis: Fake It to Make It

The RomCom RAT has been making the rounds — first in Ukraine as it went after military installations, and now in certain English-speaking countries such as the United Kingdom.

Initially a spear-phishing campaign, the RomCom attack has evolved to include domain and download spoofing of well-known and trusted products.

In this piece, we’ll break down current RomCom realities, dive into the problems with digital doppelgangers and offer advice to help secure software downloads.

RomCom Realities

Despite the name, there’s no …

advice analysis attack attack analysis campaign countries current digital dive domain down download fake making military offer phishing phishing campaign piece problems products rat romcom rat speaking spoofing ukraine united united kingdom well-known