Infected Systems Controlled Through Remote Administration Tools – Detected by EDR (2)

This AhnLab ASEC report documents a rise in threat actors deploying legitimate remote administration tools (GotoHTTP, RustDesk, Atera, ConnectWise ScreenConnect) during initial access and lateral movement to bypass anti-malware and maintain persistent control; it details how AhnLab EDR detects execution and installation behaviors for these tools and highlights their observed use by ransomware groups and APTs.