Threat Intelligence / Actor / Unattributed Remcos Operator

Unattributed Remcos Operator

Nation: N/A · 1 tracked threat(s) · Categories: PHISHING

Also known as: Remcos Operator, Commodity Remcos Crew, Google Cloud Bid-Lure Cluster

Tracked threats

Remcos RAT Phishing Campaign Abusing Google Cloud Storage (storage.googleapis.com) with RegSvcs.exe Process Hollowing — HIGH

Full actor intelligence — infrastructure, IOCs, detection coverage and operator fingerprints — is available via the Threadlinqs MCP server (Purple tier). View plans →

Threadlinqs Intelligence