Remcos or Remote Control and Surveillance, marketed as legitimate software by a German-based company Breaking Security to remotely manage Windows systems, is now widely used in multiple malicious campaigns by threat actors. Remcos is a sophisticated Remote Access Trojan (RAT) that can be used to fully control and monitor any Windows computer from XP onwards.