A Citadel which derived from Zeus banking trojan has a new variant. It allows to have an control over victim's device through VNC and other remote management tools even after being detected and removed. The usage of RDP is making malware harder to detect.