In this article, we dissect the custom protocols used in some of the most prevalent RATs seen in recent campaigns. Almost all of these malware families are Remote Access Trojans (RATs) and are found all over, from campaigns of mass infection to highly targeted attacks. Although custom protocols for malicious communication are nothing new, almost one-third of prevalent malware families we recently analyzed support communication over non-HTTP/S protocols. These trends have led some adversaries to turn to custom protocols.
0 kommentar(er)
