A novel malicious remote administration tool using stealth and self-defense techniques

摘要

As a result of technology advancement, the impact of threats against computer operating systems has increased significantly. The category of malicious remote administration tools is particularly interesting because of their effectiveness and the fact that they combine multiple techniques to offer a number of both defensive and offensive features. This paper brings together and analyzes the most innovative and powerful techniques encountered in this kind of software, on the basis of which an innovative remote administration tool is created. In order to evaluate the software, several different virtual environments are set up with the latest versions of commercial security systems and variations of the backdoor are tested against them, in order to draw conclusions about its effectiveness in real-case scenarios. Finally, countermeasures and future improvements are proposed that can be applied in order to minimize similar threats.