About this interactive
What you are doing: naming which piece of remote control each description is.
The three pieces: command and control (C2) is the control mechanism itself — the server, channel or infrastructure the attacker uses to reach in and issue orders. A remote access trojan is C2 malware disguised on one victim host, giving the attacker quiet full control of that single machine. A botnet is many compromised machines steered together, typically for a distributed denial of service or bulk spam.
How to use it: ask what the description points at. The control channel or server is C2. Stealth control of one host is a RAT. Coordinated action by many hosts is a botnet.
What you'll learn
- Sort a description of attacker remote control into the piece it names: the command-and-control server or channel, a remote access trojan on a single host, or a botnet of many hosts
- Explain that a RAT and a botnet both rely on command and control — the difference is one host under stealth control versus many hosts coordinated at once
Aligned to
CompTIA Security+
2.4
Given a scenario, analyze indicators of malicious activity.
CompTIA CySA+
1.2
Given a scenario, analyze indicators of potentially malicious activity.
Key terms
- Command and Control
C2
- Command and Control refers to the infrastructure and communication channels used by attackers to issue instructions to and receive data from compromised systems, enabling persistent access and coordinated attack operations.
- Remote Access Trojan
RAT
- A Remote Access Trojan is malware that provides an attacker with persistent unauthorized remote control over a compromised system, typically establishing a covert command and control channel and enabling keylogging, screen capture, and data exfiltration.
- Botnet
- A network of compromised computers controlled by an attacker, often used to conduct distributed attacks.
- Distributed Denial of Service
DDoS
- An attack that uses multiple systems to flood a target with traffic, making it unavailable to legitimate users.
- Backdoor
- A hidden method of bypassing normal authentication or security controls to gain unauthorized access.
Topics
Command And Control
Remote Access Trojan
Botnet
Interactive
Categorize
About TechKnowSurge
TechKnowSurge builds IT and cybersecurity professionals through hands-on, concept-first training built around real understanding — not memorization. Free interactive tools, structured programs, and 25+ years of real-world experience, all in one place.
Explore free tools and programs →