UAC-0050 Remcos RAT: Pipe Method Used for Evasion in Ukraine Attack

Authors: Karthick Kumar, Shilpesh Trivedi

Known for its history of relentless cyber-attacks against Ukrainian targets, the UAC-0050 threat group is at it again. But this time, Uptycs researchers have discovered an advanced strategy that allows for a more clandestine data transfer channel, effectively circumventing detection mechanisms employed by Endpoint Detection and Response (EDR) and antivirus systems.

The group’s weapon of choice is RemcosRAT, a notorious malware for remote surveillance and control, which has been at the forefront of its …

advanced attack attacks authors channel cyber data data transfer detection effectively endpoint evasion history pipe rat remcos remcos rat researchers strategy threat threat group transfer uac uac-0050 ukraine ukrainian uptycs