Threat Database Backdoors Backdoor.Rabasheeta

Backdoor.Rabasheeta

By Sumo3000 in Backdoors

Threat Scorecard

Threat Level: 20 % (Normal)
Infected Computers: 13
First Seen: October 10, 2012
Last Seen: September 15, 2022
OS(es) Affected: Windows

Backdoor.Rabasheeta is a backdoor Trojan and a Trojan dropper that has been involved in an alarming case of online harassment that took place in October of 2012. A threat associated with Backdoor.Rabasheeta was used to make online death threats and to submit bomb threats to various victims. Fortunately, a proven threat-removal tool can remove Backdoor.Rabasheeta easily.

Backdoor.Rabasheeta Uses Terrifying Arguments to Harass PC Users

Backdoor.Rabasheeta may be used to install a variety of payloads on the infected computer. As a backdoor Trojan, Backdoor.Rabasheeta may permit a third party to have control of your whole computer and accomplish its harmful intent which may be the installation of additional threats, the collection of personal information, the removal of files and more. Apart from this, Backdoor.Rabasheeta is also designed to make changes to the Windows Registry that allow its payload to be executed automatically when the computer starts up. Like many Trojan droppers, as soon as its related Trojan is installed, it drops its configuration files and makes the needed alterations to the infected computer's settings to ensure that its payload can work properly. Then, Backdoor.Rabasheeta removes itself from the target computer. Deleting itself automatically makes it more difficult for PC security researchers to analyze and observe Backdoor.Rabasheeta in order to create security software that can adequately protect infected computer.

Backdoor.Rabasheeta Includes a Graphical User Interface

Security researchers have observed that Backdoor.Rabasheeta has a concealed 'Test Mode' which causes Backdoor.Rabasheeta to display a graphical user interface. This may be used by criminals to debug and configure Backdoor.Rabasheeta. One of the peculiarities of this 'Test Mode'is that it allows Backdoor.Rabasheeta to be installed or uninstalled from the infected computer by simply selecting or deselecting an option in the threat's dialogue.

Protecting Your Computer from Backdoor.Rabasheeta

Computer users should be careful when downloading or installing software from unknown sources. Another security measure is to avoid clicking on unknown links or opening email attachments contained in unsolicited email messages. These are common ways in which a threat is distributed. Security researchers also advise computer users to keep their security software and operating system fully updated to ensure that any vulnerabilities in the infected computer are properly dealt with. Threats like the Backdoor.Rabasheeta will typically spread using social engineering. This means that criminals depend on inexperienced computer users to download and install threats like Backdoor.Rabasheeta themselves, often thinking that they are downloading or installing a harmless file (often a fake video codec or a bogus news item contained in a spam email message).

Registry Details

Backdoor.Rabasheeta may create the following registry entry or registry entries:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\"iesys" = "[PATH TO TROJAN]"

URLs

Backdoor.Rabasheeta may call the following URLs:

life-without-errors.com

Trending

Most Viewed

Loading...