Hackers Abuse Legitimate IT Management Tool to Sneak Into Business Networks

Threat actors exploited the inherent trust users place in legitimate IT management software (Faronics Deploy) by delivering it via phishing emails disguised as routine business documents. This 'living-off-the-land' technique is particularly dangerous because the tool itself is not malicious, allowing it to bypass many traditional security controls that rely on signature-based detection. Once executed by an unsuspecting employee, attackers gain a fully functional remote access foothold inside the corporate network. This highlights how human error, combined with insufficient application whitelisting and monitoring, creates significant exposure even when no malware is directly deployed. Organizations must recognize that legitimate tools can be just as dangerous as malware when misused by adversaries.