NetSupport Manager RAT Deployed as Secondary Payload

Ibrahim Saud@tektrix

•updated Sep 17, 2026•6•0•2

Detects the execution of 'client32.exe', which is the executable associated with NetSupport Manager, a legitimate remote management software often abused by adversaries to establish persistence and provide remote interactive access to compromised systems.