RMM Tools Fuel Stealthy Phishing Campaign

Summary

A phishing campaign is leveraging compromised or abused remote monitoring and management (RMM) tools to evade detection and maintain persistence across over 80 organizations. Attackers are exploiting the trust inherent in legitimate RMM platforms to deliver malicious payloads and steal credentials. The campaign highlights how legitimate administration tools are increasingly weaponized to bypass traditional security controls.

Entities