It is an advanced iteration of the RomCom malware, designed for espionage, data theft, and intelligence gathering.
To avoid detection, it uses advanced obfuscation methods like window message-based control flow and anti-sandboxing checks (e.g., verifying registry entries or checking for a minimum number of recent documents on the system). Connection to WinRAR Vulnerabilities snipbot.rar
In 2025, RomCom was observed exploiting a critical to deliver SnipBot. It is an advanced iteration of the RomCom