Huntress Uncovers Phishing Attacks Using Fake Browser Pages and Rogue RMM Tools

Summary

Huntress researchers have identified two phishing campaigns from August that employed a sophisticated Browser-in-the-Browser (BiTB) technique. These attacks presented victims with convincing fake browser windows, leading them to attacker-controlled websites. The attackers then leveraged legitimate Remote Monitoring and Management (RMM) tools, potentially disguised or misused, to gain persistent access to compromised devices.

Entities