Akira/BumbleBee: RustDesk Installed as Auto-Start LocalSystem Service

Ibrahim Saud@tektrix

•updated Jun 29, 2026•0•0•0

Detects the execution of RustDesk, a legitimate remote access tool, specifically when running with service or tray command-line arguments. This activity may indicate the installation of remote management capabilities by an adversary or authorized administrative activity.