BlockRAT: An Enhanced Remote Access Trojan Framework via Blockchain

【Author】 Kang, Yanze; Yu, Xiaobo; Meng, Weizhi; Liu, Yining

【Source】SCIENCE OF CYBER SECURITY, SCISEC 2022

【影响因子】

【Abstract】Remote Access Trojan (RAT) is a type of malicious software, aiming to infect victims' computers through targeted attacks. Most existing RATs require a hacker to purchase a server, a domain name and many network resources to construct the infrastructure with a Command and Control (C2) channel. However, hackers' information may be leaked or become traceable during the purchase of C2 channels and network resources. In this work, we propose BlockRAT, a blockchain-based RAT framework that can hide the hacker's personal information with untraceability and low cost. We also introduce a method to help assess the suitability of blockchain types. In the evaluation, we take Network Infrastructure for Decentralized Internet (NKN) as a case study, and compare our BlockRAT with existing studies. The results indicate that BlockRAT can achieve upstream and downstream anonymity, low cost, and good extensibility.

【Keywords】Blockchain technology; Remote access trojan; Command and control; Network attack; NKN

【发表时间】2022

【收录时间】2023-02-19

【文献类型】理论模型

【主题类别】

区块链应用-实体经济-其他