Learn in the textbookMalware Variants and Specialized Types
DefinitionA RAT (Remote Access Trojan) is malware that lets an attacker control an infected device remotely (遠隔操作).
ExplanationThe attacker sends commands over the network to pull data off the device or make it run any instruction, using it as if it were a machine on their own desk. It is common in targeted attacks (標的型攻撃) that go after a specific organization or person to steal information. As "Trojan" in the name suggests, it typically arrives disguised as a harmless file.
AnalogyIt is like a remote-controlled robot left in someone else's house. Before the owner notices, someone outside can tell it to move around the rooms.
Memory hookRAT also spells the English word for a rat. Picture it moving in and scurrying around the device in secret.