First, we must understand what a Remote Access Trojan is. Some cyber security professionals define Remote Access Trojans as "programs that provide the capability to allow covert surveillance or the ability to gain unauthorized access to a victim PC". Remote Access Trojans often mimic the behaviors of key logger applications by allowing the automated collection of keystrokes, usernames, passwords, screenshots, browser histories, e-mails, chat lots, and so on. RATs can cause great damage to networks. There are a few well-known RATs that attack specific targets. The RAT known as KjW0rm was responsible for several attacks on French TV stations. Havex is another well-known RAT, only this RAT attacks industrial control systems (ICS). AlienSpy is designed to attack the Apple OS. Most RATs are designed to operate with a command and control server.
Later in the chapter, we will discuss how...





















































