RCS
Aliases: Crisis, Remote Control System
- First seen
- 2012-06-06 00:00:00
- Malware type
- rat, spyware, screen-capture
- Family
- Malware family
- Related IoCs
- 4 (4 malicious)
- Last IoC activity
- 2026-10-15 10:45:36
- Profile updated
- 2026-07-07 12:49:35
Targeted industries: government-and-public-sector technology-and-telecommunications financial-services
Targeted regions: country_code:it country_code:sg country_code:us country_code:de
Context
RCS, also known as Crisis or Remote Control System, is a sophisticated surveillance malware developed by Hacking Team. It is designed to infiltrate target systems and perform extensive reconnaissance activities, predominantly used by government and law enforcement agencies for espionage purposes.
Reports & references
- blog.google — Google Tag Coldriver Russian Phishing Malware (report)
- media.kasperskycontenthub.com — Guerrero Saade Raiu Vb2017 (report)
- contagiodump.blogspot.com — Aug 2012 W32Crisis And Osxcrisis Jar (report)
- intego.com — New Apple Mac Trojan Called Osxcrisis Discovered By Intego Virus Team (report)
- Broadcom/Symantec — Crisis Windows Sneaks Virtual Machines (report)
- blogs.360.cn — Apt C 34 Golden Falcon (report)
- ESET — New Traces Hacking Team Wild (report)
- virusbulletin.com — Vb2019 Paper Rich Headers Leveraging Mysterious Artifact Pe Format (report)
- malpedia.caad.fkie.fraunhofer.de — Win.Rcs (report)
- f-secure.com — Callisto Group (report)
- vice.com — Jan Marsalek Wirecard Bizarre Attempt To Buy Hacking Team Spyware (report)
- f-secure.com — Callisto Group (report)
- virusbulletin.com — Vb2018 Paper Hacking Team Hacked Team (report)