Torjan Horses & RATs

Trojan Horse

A Trojan Horse is a piece of software that pretendes to be innocent but in reality is a malicious program, so that it can entice you to install itself.

Some of the characteristics of Trojan Horses are:

• It doesn't care much about replicating(unlike viruses,worms).

Once a trojan is installed on your computer it has as much access to your computer as you do.

• Once it is inside your system, it can open gates(install) to other malicious programs.

It does so by installing/opening a backdoor to the system(like a reverse shell), through which a malicious actor can access the system.

• These days Trojans are built to avoid and disable Anti-Viruses.
• Some malwares can take advantage of the backdoor created by other malwares.
• Some softwaes include a backdoor(for debugging purposes) that a malicious actor can take advantage of.

REMOTE ACCESS TROJANS(RATs)

This is a caregory of Trojans that can provide administrative control to the attackers.It is installed as a service into the victim's computer and with the help of a client software, an attacker can have unprecendeted access to your computer.

It can be used to remotely control a device.

Once installed, it can accomplish the following things:

• Key Logging
• Screen Recording & taking Screen Shots
• Downloading and Uploading Files
• Install malware,etc.

Example: DarkComet RAT