Remote Access Trojans (RATs) Target Users with Stealthy Control

2-Spyware

Remote Access Trojans (RATs) Target Users with Stealthy Control

First seen 14 Oct 2026, 16:33 UTC • •42.6

Article Content

1 / 4

Browse articles

ThreatCluster •October 14, 2026 at 17:35 UTC

•RATs allow attackers full control of infected systems.
•A 2015 incident in Ukraine showcased the severe impact of RATs on critical infrastructure.
•Users are advised to scan for and remove RATs to prevent unauthorized access.

Remote Access Trojans (RATs) are malicious software that allow cybercriminals to gain full control over an user's system, including access to files and network resources. Unlike traditional malware, RATs do not typically destroy files but enable attackers to browse applications and bypass security measures. A notable incident in Ukraine in 2015 demonstrated the potential impact of RATs, where attackers remotely accessed systems controlling utility infrastructure, affecting 80,000 people. Current guidance emphasizes the importance of scanning for RATs and removing them promptly to prevent unauthorized access. The articles provide insights into the nature of RATs, their operation, and removal strategies, but do not specify any or CVEs related to this threat.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated just now How this analysis works

More articles in this cluster (3)

Threat Graph

6 entities, 6 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (3)

Malware
T1053 - Scheduled Task/Job
T1056 - Input Capture

Malware (1)

AsyncRAT

Affected Platform (2)

Windows
Tor

Relationships

Malware targets Windows
Malware targets Tor
T1053 - Scheduled Task/Job targets Windows
T1053 - Scheduled Task/Job targets Tor
T1056 - Input Capture targets Windows
T1056 - Input Capture targets Tor

Following this threat?

Track AsyncRAT in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Common questions

How do RATs gain access?

RATs typically disguise themselves as harmless software or are bundled with legitimate applications to trick users into installation.

What are the signs of a RAT infection?

Common signs include unusual system behavior, unexpected file access, and unauthorized remote control notifications.

What steps should I take if I suspect a RAT?

Run a full security scan using reputable antivirus software and follow removal instructions to eliminate the RAT.

Continue Reading

AsyncRAT and SideCopy Campaigns Target Users with Multi-Stage Attacks Recent cybersecurity reports detail two significant malware campaigns involving AsyncRAT and SideCopy. The AsyncRAT campaign employs a five-stage infection chain utilizing a socially engineered batch file and the AutoIt interpreter, culminating in a .NET payload that steals information. Meanwhile, the SideCopy group…

CVE-2015-3306 Exploited in ProFTPD FTP Servers CVE-2015-3306, a vulnerability in ProFTPD 1.3.5, allows remote attackers to read and write arbitrary files using the SITE CPFR and SITE CPTO commands. This exploit can lead to unauthorized access and potential remote code execution, as the commands are executed with the privileges of the ProFTPD service. Active…