Description

The Remote Desktop or Screen Capture feature in malware provides the attacker with the ability to silently view and control the victim's desktop in real-time. This capability is akin to virtually looking over the victim's shoulder, offering an unfiltered window into the user's activities and data. For the attacker, this offers a multi-faceted advantage: it allows for easy data harvesting, offers clues for further exploitation, and can facilitate lateral movement across a network. Whether the end goal is data theft, corporate espionage, or advanced persistent threats, the ability to capture or control a desktop remotely equips attackers with a potent tool for deepening their intrusion into a compromised system.

Categories Spy / Surveillance, Assistance
Dangerousness High

Existing Techniques

Name Associated Feature(s) Has Snippet Matching Sample
Desktop Screenshot / Streaming logoDesktop Screenshot / Streaming Remote Desktop / Screen Capture 0
Keyboard Control logoKeyboard Control Remote Desktop / Screen Capture, Fun / Troll Functions 0
Mouse Control logoMouse Control Remote Desktop / Screen Capture, Fun / Troll Functions 0

Associated with Releases

Version Origins Authors Languages Release Date
Back Orifice 1.20 logoBack Orifice 1.20 United States 🇺🇸 Cult of the Dead Cow (cDc) C++ Jul, 1998
NetBus 1.70 logoNetBus 1.70 Sweden 🇸🇪 cf Delphi Nov, 1998
SubSeven 1.0 logoSubSeven 1.0 Romania 🇷🇴, Canada 🇨🇦 Mobman Delphi Feb, 1999
SubSeven 1.1 logoSubSeven 1.1 Romania 🇷🇴, Canada 🇨🇦 Mobman Delphi Mar, 1999
SubSeven 1.2 logoSubSeven 1.2 Romania 🇷🇴, Canada 🇨🇦 Mobman Delphi Mar, 1999
SubSeven 1.3 logoSubSeven 1.3 Romania 🇷🇴, Canada 🇨🇦 Mobman Delphi Mar, 1999
SubSeven 1.4 logoSubSeven 1.4 Romania 🇷🇴, Canada 🇨🇦 Mobman Delphi Mar, 1999
SubSeven 1.5 logoSubSeven 1.5 Romania 🇷🇴, Canada 🇨🇦 Mobman Delphi Apr, 1999
SubSeven 1.6 logoSubSeven 1.6 Romania 🇷🇴, Canada 🇨🇦 Mobman Delphi Apr, 1999
SubSeven 1.7 logoSubSeven 1.7 Romania 🇷🇴, Canada 🇨🇦 Mobman Delphi May, 1999
SubSeven 1.8 logoSubSeven 1.8 Romania 🇷🇴, Canada 🇨🇦 Mobman Delphi May, 1999
SubSeven 1.9 logoSubSeven 1.9 Romania 🇷🇴, Canada 🇨🇦 Mobman Delphi Jun, 1999
Back Orifice 2000 (BO2K) 1.0 logoBack Orifice 2000 (BO2K) 1.0 United States 🇺🇸 Cult of the Dead Cow (cDc) C++ Jul, 1999
Vampire 1.2 logoVampire 1.2 Unknown 🏴‍☠️ Ju1c3 Visual Basic 6 (VB6) Jul, 1999
SubSeven 1.9 Apocalypse logoSubSeven 1.9 Apocalypse Romania 🇷🇴, Canada 🇨🇦 Mobman Delphi Aug, 1999
SubSeven 2.0 logoSubSeven 2.0 Romania 🇷🇴, Canada 🇨🇦 Mobman Delphi Sep, 1999
SchoolBus 2.0 logoSchoolBus 2.0 Turkey 🇹🇷 Serdar Kabaoglu Delphi Oct, 1999
SubSeven 2.1 logoSubSeven 2.1 Romania 🇷🇴, Canada 🇨🇦 Mobman Delphi Nov, 1999
Hack a Tack 2000 logoHack a Tack 2000 Unknown 🏴‍☠️ The Bart33 , Da SuckA Delphi Feb, 2000
SubSeven 2.1.1 GOLD edition logoSubSeven 2.1.1 GOLD edition Romania 🇷🇴, Canada 🇨🇦 Mobman Delphi Feb, 2000
SubSeven 2.1.2 M.U.I.E logoSubSeven 2.1.2 M.U.I.E Romania 🇷🇴, Canada 🇨🇦 Mobman Delphi Apr, 2000
Y3K rat 1.0 logoY3K rat 1.0 Greece 🇬🇷 firelarm , Chucky Delphi May, 2000
SubSeven 2.1.3 BONUS logoSubSeven 2.1.3 BONUS Romania 🇷🇴, Canada 🇨🇦 Mobman Delphi Jun, 2000
SubSeven 2.1.4 DEFCON 8 logoSubSeven 2.1.4 DEFCON 8 Romania 🇷🇴, Canada 🇨🇦 Mobman Delphi Jul, 2000
Y3K rat 1.5 logoY3K rat 1.5 Greece 🇬🇷 firelarm , Chucky Delphi Jan, 2001
SubSeven 2.2 logoSubSeven 2.2 Romania 🇷🇴, Canada 🇨🇦 Mobman Delphi Mar, 2001
Y3K rat 1.6 MS logoY3K rat 1.6 MS Greece 🇬🇷 firelarm , Chucky Delphi Jul, 2001
Optix Pro 1.0 logoOptix Pro 1.0 Unknown 🏴‍☠️ s13az3 Delphi Apr, 2002
Net-Devil 1.5 logoNet-Devil 1.5 Unknown 🏴‍☠️ Nilez Delphi Jul, 2002
MoSucker 3.0b logoMoSucker 3.0b Germany 🇩🇪 Superchachi Visual Basic 6 (VB6) Nov, 2002
Beast 1.91 logoBeast 1.91 Romania 🇷🇴 Tataye Delphi Jan, 2003
Beast 1.92 logoBeast 1.92 Romania 🇷🇴 Tataye Delphi Feb, 2003
SubSeven 2.1.5 Legends logoSubSeven 2.1.5 Legends Romania 🇷🇴, Canada 🇨🇦 Mobman Delphi Feb, 2003
CIA 1.0 logoCIA 1.0 England 🏴󠁧󠁢󠁥󠁮󠁧󠁿 Alchemist Visual Basic 6 (VB6) Mar, 2003
CIA 1.1 logoCIA 1.1 England 🏴󠁧󠁢󠁥󠁮󠁧󠁿 Alchemist Visual Basic 6 (VB6) Apr, 2003
Beast 2.00 logoBeast 2.00 Romania 🇷🇴 Tataye Delphi May, 2003
Beast 2.01 logoBeast 2.01 Romania 🇷🇴 Tataye Delphi Jun, 2003
LanFiltrator 1.1 Fix 1 logoLanFiltrator 1.1 Fix 1 Australia 🇦🇺 Read101 Delphi Aug, 2003
Optix Pro 1.32 logoOptix Pro 1.32 Unknown 🏴‍☠️ s13az3 , xMs Delphi Sep, 2003
CIA 1.2 logoCIA 1.2 England 🏴󠁧󠁢󠁥󠁮󠁧󠁿 Alchemist Visual Basic 6 (VB6) Sep, 2003
Beast 2.05 logoBeast 2.05 Romania 🇷🇴 Tataye Delphi Sep, 2003
Beast 2.02 logoBeast 2.02 Romania 🇷🇴 Tataye Delphi Sep, 2003
ProRat 1.1 logoProRat 1.1 Turkey 🇹🇷 HighLander , ATmaCA Borland C++ Jan, 2004
Hue 1.0 logoHue 1.0 Unknown 🏴‍☠️ B33T Visual Basic 6 (VB6) Jan, 2004
ProRat 1.2 logoProRat 1.2 Turkey 🇹🇷 HighLander , ATmaCA Borland C++ Jan, 2004
ProRat 1.3 logoProRat 1.3 Turkey 🇹🇷 HighLander , ATmaCA Borland C++ Feb, 2004
Nuclear RAT 1.0 Beta 5 logoNuclear RAT 1.0 Beta 5 Brazil 🇧🇷 Caesar2k Delphi Feb, 2004
Beast 2.06 logoBeast 2.06 Romania 🇷🇴 Tataye Delphi Feb, 2004
ProRat 1.4 logoProRat 1.4 Turkey 🇹🇷 HighLander , ATmaCA Borland C++ Feb, 2004
LanFiltrator 1.5 Beta III logoLanFiltrator 1.5 Beta III Australia 🇦🇺 Read101 Delphi Feb, 2004