RMS
Also known as: Gussdoor, Remote Manipulator System, RuRAT
CyberInt states that Remote Manipulator System (RMS) is a legitimate tool developed by Russian organization TektonIT and has been observed in campaigns conducted by TA505 as well as numerous smaller campaigns likely attributable to other, disparate, threat actors. In addition to the availability of commercial licenses, the tool is free for non-commercial use and supports the remote administration of both Microsoft Windows and Android devices.
Linked Threat Actors
Last 7 days
| Date | C2 Hosts |
|---|---|
| Mar 29, 2026 | 1 |
| Mar 28, 2026 | 1 |
Further Reading
Attackers are sending malicious scripts that download the Remote Manipulator System (RMS) build, known as BurnsRAT, and NetSupport RAT
Unit 42 threat researchers have recently observed a threat group distributing new, custom developed malware. We have labelled this threat group the Gamaredon Group and our research shows that the G...
This research from Bitdefender Labs details a cluster of malicious activity we've been tracking since mid-2024.