Page 95 - Cyber Defense eMagazine October 2023
P. 95
Geolocation Verification:
Remcos RAT also connects with URL “http[:]//geoplugin[.]net/json[.]gp” to collect geo location information
Keylogging Activity and Log File Generation:
It also creates a log file with name “logs.dat” for keylogging. The file stored at location
“C:\ProgramData\Terminal”, it logs all activities and pressed keys on keyboard and data on clipboard.
Cyber Defense eMagazine – October 2023 Edition 95
Copyright © 2023, Cyber Defense Magazine. All rights reserved worldwide.
