RevengeHotels has expanded its arsenal with a new remote access trojan (RAT) in recent attacks targeting the hospitality sector.