Arbor’s Security Engineering & Response Team (ASERT) said this Trochilus RAT is likely driven by East Asian threat actors. It is part of a seven-piece malware cluster that offers threat actors a variety of capabilities, including espionage and the means to move laterally within target networks in order to achieve more strategic access.