RATs or “Remote Access Tools†are very popular these days. From an attacker's point of view, it's a great way to search and exfiltrate interesting data but also to pivot internally in the network. Besides malicious RATs, they are legit tools that are used in many organisations to perform “remote administrationâ€. Well-known tools are: VNC, TeamViewer, AnyDesk and much more!
This article has been indexed from SANS Internet Storm Center, InfoCON: green