[Aeolian]

Nice explanation, however I think this is known as a HTTP RAT if it's using a web page? Also if someone decompiles your malware they can find the URL pretty easily. I am still a fan of standard RAT's which aren't reliant on a web server, also for the fact I dislike PHP. Correct me if I'm wrong. But my RAT I am working on doesn't require any web pages, only the client and the server (done in C#).

They can, but most people are retarded.