Remote Access Tools and Poison Ivy: Introduction
The Poison Ivy remote access toolkit has been around for a number of years. If installed on a system, it enables one to gain full carte blanche access to the system. Even though active development of Poison Ivy stopped in 2008, it continues to be used in cyber-espionage targeted attack scenarios. This video, by Sourcefire Chief Scientist Zulfikar Ramzan, describes the functionality and capabilties of Poison Ivy.