Dossier
RMM
Coverage of RMM in the Nexus archive.
- Smoke#Screen RMM Takeover Gambit Exposes Threat Actor Playbook
The attacks use diverse social engineering lures and rotating payloads to deliver ScreenConnect for persistent remote access to compromised networks. The threat actor's playbook involves exploiting RMM systems through these methods.
- RMM Tools Fuel Stealthy Phishing Campaign
Attackers are abusing two remote monitoring and management tools to evade detection in a phishing campaign that has impacted over 80 organizations. The campaign utilizes RMM tools to remain stealthy. This has significant implications for organizational security.