Remus Stealer is an information-stealing malware family delivered through SEO poisoning campaigns that impersonate open-source and freeware projects. It was flagged by Check Point in June 2026 as part of a large-scale operation using a Traffic Distribution System.