CIA

CIA, also known as Ciadoor, is a malicious remote administration tool with lots of functions. It consists of server and client. Server secretly runs on an infected computer and accepts connections from the client, used by attackers. CIA server starts automatically on every computer startup and hides from the user. It gathers computer and user account information and sends it to the hacker. CIA can manipulate files, launch and terminate any software, log keystrokes, modify critical computer settings and control some hardware devices, steal passwords and license information of several games and applications, take screenshots of user activity. It contains an integrated FTP server that allows the attacker to download and upload many files, including user’s valuable personal documents. The hacker can configure this malware to include only those functions he needs. The most dangerous is CIA variant with all available functions. However, even the simplest configuration allows the attacker to damage files, installed software and operating computer.