Description

The Remote Desktop or Screen Capture feature in malware provides the attacker with the ability to silently view and control the victim's desktop in real-time. This capability is akin to virtually looking over the victim's shoulder, offering an unfiltered window into the user's activities and data. For the attacker, this offers a multi-faceted advantage: it allows for easy data harvesting, offers clues for further exploitation, and can facilitate lateral movement across a network. Whether the end goal is data theft, corporate espionage, or advanced persistent threats, the ability to capture or control a desktop remotely equips attackers with a potent tool for deepening their intrusion into a compromised system.

Categories Spy / Surveillance, Assistance
Dangerousness High

Existing Technique

Name Associated Feature(s) Has Snippet Matching Sample
Desktop Screenshot / Streaming logoDesktop Screenshot / Streaming Remote Desktop / Screen Capture 0

Associated with Releases

Version Origins Authors Languages Release Date
Beast 1.92 logoBeast 1.92 Romania 🇷🇴 Tataye Delphi Feb, 2003
SubSeven 2.1.5 Legends logoSubSeven 2.1.5 Legends Romania 🇷🇴, Canada 🇨🇦 Mobman Delphi Feb, 2003
CIA 1.0 logoCIA 1.0 England 🏴󠁧󠁢󠁥󠁮󠁧󠁿 Alchemist Visual Basic 6 (VB6) Mar, 2003
Z-dem0n 1.26 logoZ-dem0n 1.26 Unknown 🏴‍☠️ ZnAsH Delphi Mar, 2003
CIA 1.1 logoCIA 1.1 England 🏴󠁧󠁢󠁥󠁮󠁧󠁿 Alchemist Visual Basic 6 (VB6) Apr, 2003
Beast 2.00 logoBeast 2.00 Romania 🇷🇴 Tataye Delphi May, 2003
Beast 2.01 logoBeast 2.01 Romania 🇷🇴 Tataye Delphi Jun, 2003
LanFiltrator 1.1 Fix 1 logoLanFiltrator 1.1 Fix 1 Australia 🇦🇺 Read101 Delphi Aug, 2003
Optix Pro 1.32 logoOptix Pro 1.32 Unknown 🏴‍☠️ s13az3 , xMs Delphi Sep, 2003
CIA 1.2 logoCIA 1.2 England 🏴󠁧󠁢󠁥󠁮󠁧󠁿 Alchemist Visual Basic 6 (VB6) Sep, 2003
Beast 2.05 logoBeast 2.05 Romania 🇷🇴 Tataye Delphi Sep, 2003
Beast 2.02 logoBeast 2.02 Romania 🇷🇴 Tataye Delphi Sep, 2003
ProRat 1.1 logoProRat 1.1 Turkey 🇹🇷 HighLander , ATmaCA Borland C++ Jan, 2004
Hue 1.0 logoHue 1.0 Unknown 🏴‍☠️ B33T Visual Basic 6 (VB6) Jan, 2004
ProRat 1.2 logoProRat 1.2 Turkey 🇹🇷 HighLander , ATmaCA Borland C++ Jan, 2004
ProRat 1.3 logoProRat 1.3 Turkey 🇹🇷 HighLander , ATmaCA Borland C++ Feb, 2004
Nuclear RAT 1.0 Beta 5 logoNuclear RAT 1.0 Beta 5 Brazil 🇧🇷 caesar2k Delphi Feb, 2004
Beast 2.06 logoBeast 2.06 Romania 🇷🇴 Tataye Delphi Feb, 2004
ProRat 1.4 logoProRat 1.4 Turkey 🇹🇷 HighLander , ATmaCA Borland C++ Feb, 2004
LanFiltrator 1.5 Beta III logoLanFiltrator 1.5 Beta III Australia 🇦🇺 Read101 Delphi Feb, 2004
ProRat 1.6 logoProRat 1.6 Turkey 🇹🇷 HighLander , ATmaCA Borland C++ Mar, 2004
ProRat 1.8 logoProRat 1.8 Turkey 🇹🇷 HighLander , ATmaCA Borland C++ Mar, 2004
Infector NG 2004 2.1.0 logoInfector NG 2004 2.1.0 Belgium 🇧🇪, United Kingdom 🇬🇧 fc , Infiltration Delphi May, 2004
Messiah 1.0 logoMessiah 1.0 Unknown 🏴‍☠️ Splinter Visual Basic 6 (VB6) Jul, 2004
Optix Pro 1.33 logoOptix Pro 1.33 Unknown 🏴‍☠️ s13az3 Delphi Aug, 2004
Flux 1.0 logoFlux 1.0 Sweden 🇸🇪 Gargamel C++ Aug, 2004
Beast 2.07 logoBeast 2.07 Romania 🇷🇴 Tataye Delphi Aug, 2004
Erazer 1.0 logoErazer 1.0 Austria 🇦🇹 (v)aster Delphi Aug, 2004
Messiah 2.0 logoMessiah 2.0 Unknown 🏴‍☠️ Splinter Visual Basic 6 (VB6) Aug, 2004
Erazer 1.1 logoErazer 1.1 Austria 🇦🇹 (v)aster Delphi Sep, 2004
Messiah 3.0 logoMessiah 3.0 Unknown 🏴‍☠️ Splinter Visual Basic 6 (VB6) Oct, 2004
CIA 1.3 logoCIA 1.3 England 🏴󠁧󠁢󠁥󠁮󠁧󠁿 Alchemist Visual Basic 6 (VB6) Dec, 2004
Messiah 4.0 logoMessiah 4.0 Unknown 🏴‍☠️ Splinter Visual Basic 6 (VB6) Jan, 2005
ProRat 1.9 logoProRat 1.9 Turkey 🇹🇷 HighLander , ATmaCA Borland C++ Mar, 2005
Y3K rat 2k5 RC 1.0 logoY3K rat 2k5 RC 1.0 Austria 🇦🇹 SHA Delphi Jun, 2005
CyberNetic 1.62 (PE) logoCyberNetic 1.62 (PE) Unknown 🏴‍☠️, Spain 🇪🇸 Cybernetic crew , mHKm , shukisnike Delphi Aug, 2005
Y3K rat 2k5 RC 1.1 logoY3K rat 2k5 RC 1.1 Austria 🇦🇹 SHA Delphi Nov, 2005
TrojNa$ 1.0 logoTrojNa$ 1.0 Unknown 🏴‍☠️, Australia 🇦🇺 flippmode , Satan_Addict , Read101 Delphi Jan, 2006
Bersek 1.1 logoBersek 1.1 Brazil 🇧🇷 XpyXt Visual Basic 6 (VB6) Jun, 2006
Turkojan 3.0 logoTurkojan 3.0 Turkey 🇹🇷 Fungus Delphi Sep, 2006
Casper Demo logoCasper Demo Unknown 🏴‍☠️ loog Visual Basic 6 (VB6) Oct, 2006
Bifrost 1.2.1 logoBifrost 1.2.1 Sweden 🇸🇪 ksv C++ Jan, 2007
Hav-Rat 1.2 logoHav-Rat 1.2 Sweden 🇸🇪 Havalito Delphi Feb, 2007
Bandook 1.35 logoBandook 1.35 Lebanon 🇱🇧 PrinceAli Delphi, C++ Apr, 2007
BlasterX 1.5 logoBlasterX 1.5 France 🇫🇷 BlasterZ , Blastwar Visual Basic 6 (VB6) Apr, 2007
BlasterX 1.5 Flash The World logoBlasterX 1.5 Flash The World France 🇫🇷 BlasterZ , Blastwar Visual Basic 6 (VB6) Apr, 2007
Poison Ivy 2.3.0 logoPoison Ivy 2.3.0 Sweden 🇸🇪 Shapeless Delphi, MASM Jun, 2007
Hav-Rat 1.3.2 logoHav-Rat 1.3.2 Sweden 🇸🇪 Havalito Delphi Jul, 2007
sharK 2.4.0 Fwb+ logosharK 2.4.0 Fwb+ Germany 🇩🇪 sNiper109 , rockZ Visual Basic 6 (VB6) Aug, 2007
DARKMOON 4.11 Private Edition logoDARKMOON 4.11 Private Edition Spain 🇪🇸 shukisnike Delphi Aug, 2007