Attacks and malware
What is Remote access trojan?
Malware that gives an attacker remote control of an infected computer: running commands, moving files, watching the screen and capturing keystrokes.
A remote access trojan, or RAT, is malware that gives an attacker interactive control of an infected machine. Typical features include a remote shell, file upload and download, screenshots, keylogging and webcam or microphone access.
RATs range from cheap commodity kits sold on forums to custom implants used by espionage groups. Their network traffic to a command and control server is often the best way to detect them.