Description

The Remote Desktop or Screen Capture feature in malware provides the attacker with the ability to silently view and control the victim's desktop in real-time. This capability is akin to virtually looking over the victim's shoulder, offering an unfiltered window into the user's activities and data. For the attacker, this offers a multi-faceted advantage: it allows for easy data harvesting, offers clues for further exploitation, and can facilitate lateral movement across a network. Whether the end goal is data theft, corporate espionage, or advanced persistent threats, the ability to capture or control a desktop remotely equips attackers with a potent tool for deepening their intrusion into a compromised system.

Existing Technique

Name	Associated Feature(s)	Has Snippet	Matching Sample
Desktop Screenshot / Streaming	Remote Desktop / Screen Capture		0

Associated with Releases

Version	Origins	Authors	Languages	Release Date
Back Orifice 1.20	United States 🇺🇸	Cult of the Dead Cow (cDc)	C++	Jul, 1998
NetBus 1.70	Sweden 🇸🇪	cf	Delphi	Nov, 1998
SubSeven 1.0	Romania 🇷🇴, Canada 🇨🇦	Mobman	Delphi	Feb, 1999
SubSeven 1.1	Romania 🇷🇴, Canada 🇨🇦	Mobman	Delphi	Mar, 1999
SubSeven 1.2	Romania 🇷🇴, Canada 🇨🇦	Mobman	Delphi	Mar, 1999
SubSeven 1.3	Romania 🇷🇴, Canada 🇨🇦	Mobman	Delphi	Mar, 1999
SubSeven 1.4	Romania 🇷🇴, Canada 🇨🇦	Mobman	Delphi	Mar, 1999
SubSeven 1.5	Romania 🇷🇴, Canada 🇨🇦	Mobman	Delphi	Apr, 1999
SubSeven 1.6	Romania 🇷🇴, Canada 🇨🇦	Mobman	Delphi	Apr, 1999
SubSeven 1.7	Romania 🇷🇴, Canada 🇨🇦	Mobman	Delphi	May, 1999
SubSeven 1.8	Romania 🇷🇴, Canada 🇨🇦	Mobman	Delphi	May, 1999
NetSphere 1.31.337 Final	Unknown 🏴‍☠️	DeathBreadstick	Delphi	Jun, 1999
SubSeven 1.9	Romania 🇷🇴, Canada 🇨🇦	Mobman	Delphi	Jun, 1999
Back Orifice 2000 (BO2K) 1.0	United States 🇺🇸	Cult of the Dead Cow (cDc)	C++	Jul, 1999
Vampire 1.2	Unknown 🏴‍☠️	Ju1c3	Visual Basic 6 (VB6)	Jul, 1999
SubSeven 1.9 Apocalypse	Romania 🇷🇴, Canada 🇨🇦	Mobman	Delphi	Aug, 1999
SubSeven 2.0	Romania 🇷🇴, Canada 🇨🇦	Mobman	Delphi	Sep, 1999
SchoolBus 2.0	Turkey 🇹🇷	Serdar Kabaoglu	Delphi	Oct, 1999
SubSeven 2.1	Romania 🇷🇴, Canada 🇨🇦	Mobman	Delphi	Nov, 1999
Hack a Tack 2000	Unknown 🏴‍☠️	The Bart33 , Da SuckA	Delphi	Feb, 2000
SubSeven 2.1.1 GOLD edition	Romania 🇷🇴, Canada 🇨🇦	Mobman	Delphi	Feb, 2000
SubSeven 2.1.2 M.U.I.E	Romania 🇷🇴, Canada 🇨🇦	Mobman	Delphi	Apr, 2000
Y3K rat 1.0	Greece 🇬🇷	firelarm , Chucky	Delphi	May, 2000
SubSeven 2.1.3 BONUS	Romania 🇷🇴, Canada 🇨🇦	Mobman	Delphi	Jun, 2000
SubSeven 2.1.4 DEFCON 8	Romania 🇷🇴, Canada 🇨🇦	Mobman	Delphi	Jul, 2000
Y3K rat 1.5	Greece 🇬🇷	firelarm , Chucky	Delphi	Jan, 2001
SubSeven 2.2	Romania 🇷🇴, Canada 🇨🇦	Mobman	Delphi	Mar, 2001
Cyn 1.01	Australia 🇦🇺	Read101	Visual Basic 6 (VB6)	Apr, 2001
Y3K rat 1.6	Greece 🇬🇷	firelarm , Chucky	Delphi	May, 2001
LanFiltrator Beta 3	Australia 🇦🇺	Read101	Delphi	Jul, 2001
LanFiltrator Beta 4	Australia 🇦🇺	Read101	Delphi	Jul, 2001
Y3K rat 1.6 MS	Greece 🇬🇷	firelarm , Chucky	Delphi	Jul, 2001
Net-Devil 1.0	Unknown 🏴‍☠️	Nilez	Delphi	Aug, 2001
Net-Devil 1.1	Unknown 🏴‍☠️	Nilez	Delphi	Nov, 2001
COOL! Remote Control 1.1	United States 🇺🇸	Yaosoft	Visual Basic 5 (VB5)	Nov, 2001
Cyn 1.2.1	Australia 🇦🇺	Read101	Visual Basic 6 (VB6)	Jan, 2002
Net-Devil 1.2	Unknown 🏴‍☠️	Nilez	Delphi	Jan, 2002
Cyn 2.0	Australia 🇦🇺	Read101	Delphi	Jan, 2002
Cyn 2.1	Australia 🇦🇺	Read101	Delphi	Mar, 2002
Optix Pro 1.0	Unknown 🏴‍☠️	s13az3	Delphi	Apr, 2002
Net-Devil 1.3	Unknown 🏴‍☠️	Nilez	Delphi	Apr, 2002
Net-Devil 1.4	Unknown 🏴‍☠️	Nilez	Delphi	Apr, 2002
COOL! Remote Control 1.12	United States 🇺🇸	Yaosoft	Visual Basic 5 (VB5)	May, 2002
Cyn 2.2	Australia 🇦🇺	Read101	Delphi	Jun, 2002
Net-Devil 1.5	Unknown 🏴‍☠️	Nilez	Delphi	Jul, 2002
LanFiltrator Beta 7	Australia 🇦🇺	Read101	Delphi	Aug, 2002
Ghost 2.4	Israel 🇮🇱	Lame_Joker	Visual Basic 6 (VB6)	Sep, 2002
LanFiltrator 1.0	Australia 🇦🇺	Read101	Delphi	Oct, 2002
MoSucker 3.0b	Germany 🇩🇪	Superchachi	Visual Basic 6 (VB6)	Nov, 2002
Beast 1.91	Romania 🇷🇴	Tataye	Delphi	Jan, 2003