Bandook RAT

The Bandook RAT, a/k/a Backdoor.Bandook and Troj.Bandok-j, is a Trojan that has plagued multiple generations of Windows PC systems since 2005. Sporting a string of remote-access functions, the Bandook RAT is an effective means of harvesting all data types, including personal information. Having undergone substantial developments over time, the Bandook RAT is fully equipped with all the weapons typical of Trojans, namely:

• An audio, video and screen capture tool to eavesdrop on your conversations, make screenshots and record your web cam activity;
• Keylogging features to retrieve your login credentials to different services;
• Command shell and process hollowing capabilities to execute commands and hijack processes on your Windows-based PC system.

The Bandook RAT has reportedly been available for sale on the Dark Web for many years now, which has turned it into a fairly threatening and common malware. Since it is essentially a remote-access-tool, Bandook sends whatever data it has collected to a remote server, giving the hackers who exploit it leverage against the victims whose personal details have fallen into the wrong hands. The Trojan is so well-built that it is fully capable of evading multiple firewall applications, tampering with the Windows Registry settings, and even bringing in additional malware.