In mid-March 2023, we noticed an uptick in telemetry related to our tracking of the operator behind the RomCom remote access trojan (RAT). Politicians from Ukraine U.S.-based Healthcare organizations Trojanized applications, 圆4 dll payloadsĬloned websites, C2 servers using self-signed SSL certificates This report is the first part of our research covering the details of RomCom’s latest malicious campaign, while the second part will cover RomCom's behaviors, including detection engineering.

In RomCom’s latest campaign, the BlackBerry Threat Research and Intelligence team observed RomCom targeting politicians in Ukraine who are working closely with Western countries, and a U.S.-based healthcare company providing humanitarian aid to the refugees fleeing from Ukraine and receiving medical assistance in the U.S.

Batch file scripting and command-line interface and .The RomCom threat actor has been carefully following geopolitical events surrounding the war in Ukraine, targeting militaries, food supply chains, and IT companies.

Support for SFTP and SCP protocols over SSH and FTP and WebDAV and S3 protocols.Integration with Windows (drag&drop, URL, shortcut icons, jump list).Beyond this, WinSCP offers scripting and basic file manager functionality. Its main function is file transfer between a local and a remote computer. WinSCP is an open source free SFTP client, FTP client, WebDAV client, S3 client and SCP client for Windows.

Download WinSCP 5.21.8