Netskope Threat Labs

RemoteAdmin

ATP Sandbox Adv. HeuristicsAV

Description

RemoteAdmin is a generic detection for remote administration tools that cyberattackers may use for unauthorized access to compromised systems. Such tools are legitimate when managed, but intrusions frequently install them as durable backdoors because their signed, trusted software blends into routine IT activity. Detections under this name call for verification against authorized inventory, and unexpected installations should trigger credential resets and removal.

Stats

First seen
January 2022
Last seen
October 2026

Also known as

Remoteadmin

Alert name variants

Alert Name
Android.RemoteAdmin.A
Application.Remoteadmin.AB
Application.Remoteadmin.GX
Application.Remoteadmin.HB
Application.Remoteadmin.Q
Application.RemoteAdmin.RFI
Application.RemoteAdmin.RFM
Application.RemoteAdmin.RFS
Application.RemoteAdmin.RGU
Application.RemoteAdmin.RHU

References