We're gradually updating threat actor names in our reports to align with the new weather-themed taxonomy. Learn about Microsoft threat actor names
Backdoor:Win32/Agent.RL
Detected by Microsoft Defender Antivirus
Aliases: Backdoor.Win32.Agent.sw (Kaspersky) MultiDropper-JD (McAfee) W32/Agent.ATPQ (Norman) Mal/Generic-A (Sophos) Generic.Mitglied (Sunbelt Software) Trojan Horse (Symantec)
Summary
Backdoor:Win32/Agent.RL is a backdoor Trojan that runs as a process at Windows startup, and may contact a remote Web server to notify attackers of the Trojan installation. Agent.RL may download additional programs or malware.