AgtaBackup RAT uses fake Microsoft Store pages and legitimate RMM tools to gain covert remote access to Windows systems.
Source: GreyNoise Global Observation Grid and adversary infrastructure. Times are UTC. Jul 22 times come from preserved file timestamps and may differ from a forensic investigation.
Some results have been hidden because they may be inaccessible to you
Show inaccessible results