How to prevent a Remote Access Trojan or RAT?

by | Mar 7, 2017 | CCNA, CCNP, CompTIA, Data Breaches and Prevention, End Point Protection, Malware Prevention, Security Fundamentals

What is a Remote Access Trojan or RAT?

A Remote Access Trojan or RAT is a type of malware that infects a remote computer and allows remote access to the computer to the attacker. As a result, the attacker can exploit the remote access for malicious purposes. A Remote Access Trojan (RAT) is usually installed on a computer secretly without the user’s knowledge and hides its operation from the security software installed on the computer.

Usually, these RATs infect a computer when a user clicks on a malicious link, downloads untrusted software, or uses Peer-to-Peer File Sharing software like BitTorrent. A RAT often disguises itself as a legitimate program or file. After infecting a computer, a file or stub is opened on the victim’s computer, and the attacker gains control of the computer. Usually, the file itself may not create much suspicion. If a user clicks on it, it may show an error message indicating the file could not be opened.

How does a Remote Access Trojan (RAT) work?

RAT is a malware program. So, like other malware programs, it infects a computer using deception. It usually disguises itself as some software that is desirable and harmless and convinces an innocent user to install it. (What is social engineering?)

A RAT may come as an email attachment. It can also get installed on a computer along with some other useful-looking malicious software. For example, it may disguise itself as an attractive video game from an untrusted source or a rogue anti-malware program that fraudulently indicates that the computer is already infected by malware. It thus convinces the user to install it. A Remote Access Trojan (RAT) can also infect a computer when the user clicks on a malicious link or visits a malicious website.

After infecting the computer, the RAT connects back to the attacker remotely. And, as the malware program has remote administrative capability, it gives complete unauthorized access to the computer to the attacker.

The attacker can now control the computer remotely and exploit the remote access for malicious purposes.

What does a Remote Access Trojan (RAT) do?

A Remote Access Trojan (RAT) gets administrative privileges on the infected computer. So, it can perform many malicious activities by exploiting administrative privileges. Some of them are mentioned below:

  • As a RAT gets administrative privileges on the infected computer, it can exploit that to control the microphone or webcam of the infected computer. It can record sound and videos and spy on the victim. It can even capture screens of the computer for malicious purposes.
  • It can install keyloggers and start logging keystrokes on the computer (What is a keylogger and how to prevent it?). Using keyloggers attackers can steal sensitive data like passwords and credit card numbers of the user. In fact, it is always a piece of good advice to use the virtual keyboard on a banking website and not to type any password using the computer keyboard.
  • A Remote Access Trojan collects sensitive data from the infected computer and sends the data to the attackers. It can upload, download, or destroy sensitive files or other data.
  • Many a time,  Remote Access Trojans infect computers and exploit the computational resources of the infected computer to perform illegal actions like DDoS attacks.
  • A RAT can silently install even more malware on the infected computer and perform illegal activities. Sometimes, it changes the browser settings for malicious purposes. (What is browser hijacking and how to prevent it?)
  • As a Remote Access Trojan (RAT) gets administrative privileges on the infected computer, the attacker can do anything that the admin user of the computer can. The attacker can shut down or restart the computer at his own will to facilitate their malicious activities. The attacker can block or control the mouse and keyboards, control the task manager of the computer, format the drive, or even destroy the hardware of the computer, for example, by increasing the clock rate of the system.

One such example of a RAT is Back Orifice. It targeted Microsoft Windows computers and …

Facebooktwitterredditpinterestlinkedinmail

Calculate the pseudoinverse of a matrix using Python

What is the pseudoinverse of a matrix? We know that if A is a square matrix with full rank, then A-1 is said to be the inverse of A if the following condition holds: $latex AA^{-1}=A^{-1}A=I $ The pseudoinverse or the Moore-Penrose inverse of a matrix is a...

Cholesky decomposition using Python

What is Cholesky decomposition? A square matrix A is said to have Cholesky decomposition if it can be written as a product of a lower triangular matrix and its conjugate transpose. $latex A=LL^{*} $ If all the entries of A are real numbers, then the conjugate...

Tensor Hadamard Product using Python

In one of our previous articles, we already discussed what the Hadamard product in linear algebra is. We discussed that if A and B are two matrices of size mxn, then the Hadamard product of A and B is another mxn matrix C such that: $latex H_{i,j}=A_{i,j} \times...

Perform tensor addition and subtraction using Python

We can use numpy nd-array to create a tensor in Python. We can use the following Python code to perform tensor addition and subtraction. import numpy A = numpy.random.randint(low=1, high=10, size=(3, 3, 3)) B = numpy.random.randint(low=1, high=10, size=(3, 3, 3)) C =...

How to create a tensor using Python?

What is a tensor? A tensor is a generalization of vectors and matrices. It is easily understood as a multidimensional array. For example, in machine learning, we can organize data in an m-way array and refer it as a data tensor. Data related to images, sounds, movies,...

How to combine NumPy arrays using horizontal stack?

We can use the hstack() function from the numpy module to combine two or more NumPy arrays horizontally. For example, we can use the following Python code to combine three NumPy arrays horizontally. import numpy A = numpy.array([[1, 2, 3], [4, 5, 6], [7, 8, 9]]) B =...

How to combine NumPy arrays using vertical stack?

Let’s say we have two or more NumPy arrays. We can combine these NumPy arrays vertically using the vstack() function from the numpy module. For example, we can use the following Python code to combine three NumPy arrays vertically. import numpy A = numpy.array([[1, 2,...

Singular Value Decomposition (SVD) using Python

What is Singular Value Decomposition (SVD)? Let A be an mxn rectangular matrix. Using Singular Value Decomposition (SVD), we can decompose the matrix A in the following way: $latex A_{m \times n}=U_{m \times m}S_{m \times n}V_{n \times n}^T $ Here, U is an mxm matrix....

Eigen decomposition of a square matrix using Python

Let A be a square matrix. Let’s say A has k eigenvalues λ1, λ2, ... λk. And the corresponding eigenvectors are X1, X2, ... Xk. $latex X_1=\begin{bmatrix} x_{11} \\ x_{21} \\ x_{31} \\ ... \\ x_{k1} \end{bmatrix} \\ X_2=\begin{bmatrix} x_{12} \\ x_{22} \\ x_{32} \\ ......

How to calculate eigenvalues and eigenvectors using Python?

In our previous article, we discussed what eigen values and eigenvectors of a square matrix are and how we can calculate the eigenvalues and eigenvectors of a square matrix mathematically. We discussed that if A is a square matrix, then $latex (A- \lambda I) \vec{u}=0...

Amrita Mitra

Author

Ms. Amrita Mitra is an author, who has authored the books “Cryptography And Public Key Infrastructure“, “Web Application Vulnerabilities And Prevention“, “A Guide To Cyber Security” and “Phishing: Detection, Analysis And Prevention“. She is also the founder of Asigosec Technologies, the company that owns The Security Buddy.

0 Comments

Submit a Comment

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Not a premium member yet?

Please follow the link below to buy The Security Buddy Premium Membership.

Featured Posts

Translate »