Netskope Threat Labs

RTF.Agent

ATP Sandbox Adv. HeuristicsAV

This generic detection identifies malicious rich text format documents that perform unauthorized actions when opened, without attributing them to a specific family.

First seen
May 2022
Last seen
September 2026
Alert Name
Exploit.RTF.Agent.AI
Exploit.RTF.Agent.AI:2FBF2
Exploit.RTF.Agent.CU
Exploit.RTF.Agent.GR
Exploit.RTF.Agent.GR:3D4BF
Exploit.RTF.Agent.IE
Exploit.RTF.Agent.IH
Exploit.RTF.Agent.OD
Exploit.RTF.Agent.PH
Trojan.RTF.Agent.D