Description
UltraVNC is a legitimate open source remote administration tool for Windows that lets support staff view and control remote desktops. Cyberattackers frequently abuse it as a hands on keyboard access tool during intrusions because its traffic blends into routine remote support activity, so responders should triage its detections against authorized use.
Stats
- First seen
- April 2022
- Last seen
- October 2026
Alert name variants
| Alert Name |
|---|
| Application.RemoteAdmin.UltraVNC.A |
| Win32.Trojan.UltraVNC |
| Win64.Trojan.UltraVNC |