RAT

Malware that gives an attacker covert remote control of a host.

A Remote Access Trojan is malware that grants an attacker covert, persistent remote control of a compromised host, often including keylogging, screen capture, file theft, and webcam access. It typically arrives disguised as legitimate software or through phishing and then beacons out to a command and control server. Because it operates with the victim's privileges and hides its presence, it enables long-term espionage and lateral movement. Detection relies on behavioral monitoring, EDR, and watching for unusual outbound connections.