Ma Trojan a Remote Access akukula kwambiri m'zaka zaposachedwa ndipo afala kwambiri kuposa mitundu ina ya pulogalamu yaumbanda yomwe imapezeka padziko lonse lapansi. Makamaka, kuyambira kufalikira kwa COVID-19, Agent Tesla remote-access trojan (RAT) yagwiritsa ntchito bwino mantha a mliri ndikuwonjezera zatsopano zingapo. Tesla adafika koyamba pamalopo zaka zisanu ndi zinayi zapitazo ndipo adawonetsedwa paziwopsezo zambiri mu theka loyamba la 2020 kuposa ziwopsezo zodziwika bwino za pulogalamu yaumbanda TrickBot kapena Emotet, makamaka motsutsana ndi mabizinesi.
Agent Tesla amagwira ntchito pa keylogging komanso kuba data. Ma binaries ake atsopano amapereka njira zowonjezereka zofalitsira ndi jakisoni ndipo amatha kuba zambiri zama netiweki opanda zingwe ndi zidziwitso. Agent Tesla amathanso kukolola zosintha ndi zidziwitso kuchokera kwamakasitomala angapo wamba a VPN, FTP ndi makasitomala a imelo ndi asakatuli, kuphatikiza Apple Safari, Google Chrome, Edge, Mozilla Firefox, Mozilla Thunderbird, OpenVPN, Opera Mail ndi ena ambiri.
Chinthu china chatsopano cha Trojan yakale ya Remote Access ndi chakuti zosintha zimatha kutenga zowonjezera kuti zikhazikike pamakina a wozunzidwayo kenako ndikubaya ma code mu magawo achiwiri ngati njira yodziwira.
Mu kampeni ina, ofufuza adawona Agent Tesla akuponya buku la RegAsm.exe ndikulowetsamo code yowonjezera; Choncho, RegAsm.exe inagwira ntchito zazikulu zokolola deta ndi kuchotsa. Jakisoniyo amachitidwa pogwiritsa ntchito hollowing, momwe magawo amakumbukidwe amasinthidwe ndi dangalo ndikusinthidwanso ndi code yoyipa.
Zosintha zina zawonedwa pamachitidwe a pulogalamu yaumbanda. Khodi ikakhazikitsidwa, pulogalamu yaumbanda imasonkhanitsa zidziwitso zamakina am'deralo, ndikuyika keylogger kenako ndikuyambitsa njira zopezera ndikukolola zambiri. Panthawiyi, pulogalamu yaumbanda imayang'ana zoikamo za netiweki opanda zingwe ndi zidziwitso.
Ngakhale Agent Tesla adakhalapo kwa zaka zingapo tsopano, owukira akupitiliza kupanga njira zatsopano zogwiritsira ntchito pomwe akudziwikiratu ndikupewa kuzindikirika.