URL shortener in a Microsoft Word file that leads to Remcos RAT

Note: Recently, in our X-Labs telemetry data, we found a Word doc (FAKTURA.docx) that deploys the Remcos Remote Access Trojan (RAT.) During the course of our analysis, we realized that Cyfirma had completed a threat analysis in March 2024 . S ince we had found new Indicators of Compromise and more information about where this malware is being sent from,…