12,194guides5,441members
8 Octporterneuman.mx: PowerShell and JavaScript files tied to the AveMaria remote access trojan, and what to do8 Octdonutclientsmods.xyz: fake DonutSMP Minecraft mods tagged SilentNet, and what to do if you ran one8 Octsqpengg.com: a server handing out crypted PowerShell scripts, and what to do if one ran on your PC8 Octdonutsmpcheats.org: fake Minecraft cheat mods with the SilentNet stealer, and what to do if you installed one8 Octmaciejbi.hosting24.pl: a hosting subdomain that served Remcos scripts and a stego picture, and what to do if your PC fetched them8 Oct87130921-60-20220830152356.webstarterz.com: an open folder serving Formbook and XWorm PowerShell scripts, and what to do if one ran8 Octficus.in: picture files hiding the Remcos remote access trojan, and what to do if a script fetched them8 OctOpenDrive virus: why web.opendrive.com shows up in malware alerts, and what to do if a file from it installed Remcos
Topic · 52 pages

Remote access trojans (RATs)

Remote access trojans (RATs): every 2-Spyware guide, news story and file page on this topic, newest first.

Dalintis
FacebookXLinkedInTelegramWhatsAppEl. paštuKopijuoti nuorodą

Latest: porterneuman.mx: PowerShell and JavaScript files tied to the AveMaria remote access trojan, and what to do (10/8/2026)

Newest first

Pages about Remote access trojans (RATs)

TrojansHigh risk

Remove porterneuman.mx: PowerShell and JavaScript files tied to the AveMaria remote access trojan, and what to do

porterneuman.mx is a web address where URLhaus found five script files in a WordPress plugin folder on 30 September 2026: four PowerShell stubs and one JavaScript file. One stub…Ugnius Kiguolis ·
TrojansHigh risk

Remove maciejbi.hosting24.pl: a hosting subdomain that served Remcos scripts and a stego picture, and what to do if your PC fetched them

maciejbi.hosting24.pl is a subdomain on a Polish hosting service that URLhaus listed on 1 October 2026 for three files tagged RemcosRAT: Remcos is a remote access trojan for…Ugnius Kiguolis ·
TrojansHigh risk

Remove ficus.in: picture files hiding the Remcos remote access trojan, and what to do if a script fetched them

ficus.in is a web address, registered since 2010, that URLhaus lists ten times between 15 September and 1 October 2026 for picture files (img_*.png in its img folder) tagged…Ugnius Kiguolis ·
TrojansHigh risk

Remove OpenDrive virus: why web.opendrive.com shows up in malware alerts, and what to do if a file from it installed Remcos

Ugnius Kiguolis ·
Security

TA505 ServHelper and FlawedGrace RAT: 2026 Guide

2-Spyware Editorial Team ·
TRHigh risk

Remove fujeigroup.com: a server handing out picture files that hide AsyncRAT, and what to do if a loader fetched them

Ugnius Kiguolis ·
MalwareHigh risk

Remove OnlyFans malware

Jake Doevan ·
TrojansHigh risk

Remove Vagus RAT

Vagus - a dangerous Remote Access Trojan that can steal personal info and perform other malicious actions Vagus is a type of malware attributed to the RAT category. It isLinas Kiguolis ·
TrojansHigh risk

Remove CapraRAT virus

CapraRAT is Android-based malware that steals sensitive user data CapraRAT is a Remote Access Trojan that has recently surfaced in the wild,[ref en-3] mainly targeting Indian…Olivia Morelli ·
MalwareHigh risk

Remove TigerRAT malware

TigerRAT malware can give cybercriminals remote access to an infected machine TigerRAT is a malicious program with a wide variety of capabilities. RATs (Remote Access Trojans)…Ugnius Kiguolis ·
AdwareMedium risk

Remove Norton LifeLock email scam

Linas Kiguolis ·
MalwareHigh risk

Remove Trojan Win32/Conteban.B!ml

Jake Doevan ·
MalwareHigh risk

Remove PingPull malware

Linas Kiguolis ·
MalwareHigh risk

Remove Borat RAT

Julie Splinters ·
TrojansHigh risk

Remove Biopass RAT

Biopass RAT – a Python-based backdoor capable of various devastating actions Biopass RAT is an extremely perilous malware infection spreading through fake Adobe Flash Player and…Jake Doevan ·
SPAM toolsLow risk

Remove I infected you with my private malware (RAT) (email scam)

Remote Administration Tool infection email is a message scamming people with the scary warning about possible virus infiltration Remote Administration Tool (RAT) email is a…Lucia Danes ·
TrojansHigh risk

Remove BO Sniffer v1.2

BO Sniffer v1.2 – a dangerous infection gunning for your private details BO Sniffer v1.2 is a Remote Access Trojan (or RAT for short) created for spying on user activitiesUgnius Kiguolis ·
TrojansHigh risk

Remove Duqu virus

Jake Doevan ·
TrojansHigh risk

Remove Orcus RAT

Olivia Morelli ·
MalwareHigh risk

Remove BitRAT malware

Jake Doevan ·
TrojansHigh risk

Remove Beast

Gabriel E. Hall ·
MalwareHigh risk

Remove Fastsupport.com

Fastsupport is a service often used to install malicious software on targeted computer systems www.fastsupport.com is entirely legitimate software, developed by LogMeln Inc.,…Ugnius Kiguolis ·
TrojansHigh risk

Remove Abaddon RAT

Abaddon RAT is the malware that uses the Discord app as a command & control server Abaddon RAT is the intruder with a ransomware feature and gets instructions from creatorsJulie Splinters ·
MalwareHigh risk

Remove Hacktool:win32/keygen

Hacktool:win32/keygen is a generic detection name that points to the pirated software for cracking software licenses Hacktool:win32/keygen is a representation of a cracking tool,…Olivia Morelli ·
TrojansHigh risk

Remove Program:Win32/Wacapew.B!ml

Jake Doevan ·
TrojansHigh risk

Remove Gh0st RAT

Olivia Morelli ·
TrojansHigh risk

Remove Agent Tesla

Gabriel E. Hall ·
MalwareHigh risk

Remove GuLoader

Ugnius Kiguolis ·
TrojansHigh risk

Remove Dacls virus

Dacls is a dangerous Remote Access Trojan managed by Lazarus threat group that targets Windows, Linux, and Mac users Dacls virus is yet another dangerous Remote Access Trojan…Julie Splinters ·
TrojansHigh risk

Remove Quasar virus

Quasar - a Remote Access Tool that has its legitimate and malicious uses Quasar virus is a Remote Access Trojan (RAT) that is often abused by cybercriminals to take remoteJake Doevan ·
TrojansHigh risk

Remove njRat

njRat is a multi-functional Remote Access Trojan that can log keystrokes and disable anti-malware software on the host machine njRat, also known as Bladabindi, is a Microsoft .NET…Lucia Danes ·
TrojansHigh risk

Remove NanoCore virus

Olivia Morelli ·
AdwareMedium risk

Remove "Google Security Warning" virus

Gabriel E. Hall ·
TrojansHigh risk

Remove Atilla stealer

Olivia Morelli ·
TrojansHigh risk

Remove Trochilus virus

Julie Splinters ·
TrojansHigh risk

Remove Mlsuc

Mlsuc - dangerous malware capable of stealing sensitive information Mlsuc is a backdoor trojan[ref en-1] that provides attackers with unauthorized remote access to the compromised…Jake Doevan ·
FileNot rated

GoToAssist.exe

GoToAssist.exe — legitimate process which might be exploited by criminals GoToAssist.exe is an executable file which belongs to an entirely legitimate remote access tool.…Julie Splinters ·
TrojansHigh risk

Remove RadMin

Radmin - a dangerous trojan horse that allows bad actors to remotely control your device Radmin virus is a remote administration tool (RAT) that comes into systems as a trojanJake Doevan ·
MalwareHigh risk

Remove Qarallax

Olivia Morelli ·
AdwareMedium risk

Remove You Are Using An Older Version Of Chrome

Linas Kiguolis ·
RansomwareHigh risk

Remove DarkKomet ransomware virus

Julie Splinters ·
TrojansHigh risk

Remove 87130921-60-20220830152356.webstarterz.com: an open folder serving Formbook and XWorm PowerShell scripts, and what to do if one ran

Ugnius Kiguolis ·
TrojansHigh risk

Remove Cloudinary virus: why res.cloudinary.com shows up in malware alerts, and what to do if a loader fetched its pictures

Cloudinary is a legitimate image hosting service, not a virus, but criminals upload JPG pictures that hide malware and point loaders at them. In September 2026 URLhaus listed…Ugnius Kiguolis ·
Security

Microsoft OneNote Malware in 2026: Is OneNote Safe Now?

Microsoft OneNote is safer in 2026: since 2023 it blocks 120 risky embedded file types on Windows. How OneNote malware worked and what phishing still does.2-Spyware Editorial Team ·
Spam and phishing

Truist Phishing Email Scams in 2026: How to Spot Them

Truist phishing emails and texts still circulate in 2026. How to spot a fake Truist alert, where to report it, the FBI case behind it and safe steps.Gabriel E. Hall ·
Viruses and parasites

Agent Tesla Malware in 2026: What the Trojan Steals Now

Julie Splinters ·
System toolsMedium risk

Remove Discord virus

Jake Doevan ·
TrojansHigh risk

Remove Back Orifice

Gabriel E. Hall ·
AdwareMedium risk

Remove Putlocker virus

Ugnius Kiguolis ·
BackdoorsHigh risk

Remove Backdoor:MSIL/AsyncRAT

Backdoor:MSIL/AsyncRAT - a dangerous malware attack that can result in a complete computer compromise Backdoor:MSIL/AsyncRAT is Microsoft's detection name for a Remote Access…Jake Doevan ·
TrojansHigh risk

Remove Remcos

Remcos RAT is a dangerous info-stealing trojan that abuses the Coronavirus as a theme for the malicious spam attacks Remcos or Remote Control and Surveillance[ref en-1] are…Alice Woods ·
MalwareHigh risk

Remove Pokemon Go virus

Pokemon Go virus is a term used to describe cyber infection that pretends to be the original video game Pokemon Go virus is a type of dangerous cyber threat thatGabriel E. Hall ·

A topic collects every page that is about it; the list updates when new pages are published.

5,441 members already hereReading, writing, commenting and voting. 0 verified · 166 joined this year
All membersJoin