S0332 - Remcos

Threat Intelligence Feed

Feed ID: 6R3aI4cBgHqbhTfS6RCw

Remcos is a closed-source tool that is marketed as a remote control and surveillance software by a company called Breaking Security. Remcos has been observed being used in malware campaigns.


Select the way you want to use this feed:


Download Feed

Download this Threat Intelligence feed directly or through code:

  • Several different formats (Simple IoC lists or full context JSON)
  • Code snippets available on how to download it in different programming languages.


  • Integrate Feed

    Automate your Security Operations by integrating this feed data real time into your Security Stack:

  • Onboard Maltiverse Feeds on security devices (SIEM, SOAR, Firewalls, etc)
  • Create your own feed and deploy new IoCs insantly across you security devices.


  • Feed composition

    Feed composition by type

    IP Address Hostname URL Sample Total

    Feed ingestion over time ()

    Feed composition by type

    results found for: “classification:malicious AND blacklist.external_references.external_id:"S0332"”