Remote Access Trojan
NetSupport RAT
First seen: 2017-01 • Status: active
Currently Active Threat
NetSupport is real IT software that hackers abuse. They install it after breaking in to control computers.
Overview
NetSupport Manager is legitimate remote admin software frequently abused as a RAT after initial malware infection.
Also Known As
NetSupport Manager RAT
How It Spreads
- • Dropped by other malware
- • Phishing
What It Does
- • Remote control
- • Legitimate tool abuse
Is your business exposed?
Target Platforms
Windows
Detection Tips
- • Monitor for unauthorized NetSupport installations
MITRE ATT&CK Techniques
T1219
If You're Infected
- 1.
Remove unauthorized installations
Is your business exposed?
Check if your company data is circulating on the dark web
Free scan • No credit card required