Remote access trojan
Malware that gives an operator interactive control of a machine: file access, keystrokes, screen, camera, and the ability to run anything the logged in user could. Sold with a control panel, often on a subscription, sometimes with support.
Why it matters to you
The distinction that matters operationally is that a human is at the other end. It waits, it watches, and it reacts to what your responders do, which is why containment that announces itself gives the operator time to move. Plan the response before touching the host.
Where we meet it
These are sold as products with versions, changelogs and licence terms, and the panel is the part buyers compare. That commercial shape is why the same family appears behind operators with nothing else in common.
Connected terms
C2 panel
The web console an operator uses to run infected machines: victims listed, tasks queued, output collected. Sold with the malware, screenshotted in the advertisement, and often the most revealing artifact a crew produces.
Crypt / FUD
Crypting is the service of repacking malware until antivirus engines stop recognizing it. FUD, "fully undetectable", is the advertised result, sold with a guarantee and re-crypts included.
Web shell
A small script left on a compromised web server that turns an ordinary HTTP request into command execution. Often a single file, often named to blend into the application around it, and reachable by anyone who knows the path and the password.
Read elsewhere
Where this term stops being vocabulary
Malveine is where you watch it happen to you
Knowing the word is the cheap half. The platform is the half where the term arrives attached to your domain, with a timestamp and the source it came from.
More from the goods
Bank log
Access to a compromised online banking account, sold with the balance quoted in the listing. Priced as a fraction of what it holds, because the buyer still has to get the money out.
BIN
The first six to eight digits of a payment card, identifying the issuing bank, the country and the card product. Not stolen data in itself, but the index the trade is organised around: cards are advertised, sorted and priced by BIN.
Card dump
The magnetic-stripe data read off a payment card, sold for cloning into a physical one. Distinct from card-not-present data, priced higher, and slowly becoming a legacy good as chip and contactless spread.
Combolist
A recycled email:password list compiled from old breaches and other people's logs, resold in bulk. The fast food of the credential economy: cheap, stale, everywhere.