Security News Nebulous Mantis Targets NATO-Linked Entities with Multi-Stage Malware Attacks

[[correlate]]

Content source

https://thehackernews.com/2025/04/nebulous-mantis-targets-nato-linked.html

Cybersecurity researchers have shed light on a Russian-speaking cyber espionage group called Nebulous Mantis that has deployed a remote access trojan called RomCom RAT since mid-2022.

RomCom "employs advanced evasion techniques, including living-off-the-land (LOTL) tactics and encrypted command and control (C2) communications, while continuously evolving its infrastructure – leveraging bulletproof hosting to maintain persistence and evade detection," Swiss cybersecurity company PRODAFT said in a report shared with The Hacker News.