Attacks and malware

What is Remote access trojan?

Malware that gives an attacker remote control of an infected computer: running commands, moving files, watching the screen and capturing keystrokes.

A remote access trojan, or RAT, is malware that gives an attacker interactive control of an infected machine. Typical features include a remote shell, file upload and download, screenshots, keylogging and webcam or microphone access.

RATs range from cheap commodity kits sold on forums to custom implants used by espionage groups. Their network traffic to a command and control server is often the best way to detect them.

Where you learn it

See Remote access trojan in a real investigation

Our missions put you in front of real logs, domains and forums, with these terms underlined where they appear.

Start learning free