RAT WARS: Detecting RitB (RAT-in-the Browser) with Behavioral Biometrics

 

• RitB = a third-generation Trojan target to attack online banking

• Modus Operandi: The attacker uses a Remote Administration Tool (RAT) based on standard remote access protocols to fully control the victim’s PC from afar. 

• Dyre is currently the most widespread Trojan that uses RitB

• Dridex typically targets commercial banking and is also heavily using RitB

• Other Trojans include Neverquest, Shifu and many  Zeus clones that feature VNC functionality with back-connect.