Skip to content

RAT

TrustConnect RAT

TrustConnect RAT is a malware-as-a-service remote access trojan disguised as a legitimate remote monitoring tool.

TrustConnect RAT is a Windows rat.

Background

TrustConnect RAT is a remote access trojan offered as malware-as-a-service that masquerades as a genuine remote monitoring product. Operators control infected machines from a web dashboard, using SSL/TLS-protected web APIs to manage compromised hosts, run commands, move files, gather system details, open remote desktop sessions, and capture screen recordings.

DocConnect RAT is an upgraded and reengineered version of TrustConnect RAT. It fixes earlier security and detection weaknesses (such as poor credential storage, weak persistence, and detectable command-and-control mechanisms) while adding new capabilities, including an interactive multi-session terminal, stronger process protection against termination, a fake Windows Update overlay for deception, and a PDF-based lure and delivery system.


Source: Malpedia (Fraunhofer FKIE).