[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f8uSj-KXc4sqcQxhp7FjoACXvhZFEmh40Cqy1H4JhYTQ":3},{"article":4,"iocs":36,"watch_terms":43},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"full_text":10,"url":11,"image_url":10,"published_at":12,"ingested_at":13,"relevance_score":14,"entities":15,"category_id":16,"category":17,"article_tags":20},"680b6222-319e-42af-baef-9d821d2d4161","Signed #RMM and synthetic domains are exploited to bypass #cybersecurity. Tactic: Hijacking of a...","signed-rmm-and-synthetic-domains-are-exploited-to-bypass-cybersecurity-tactic-hi","Signed #RMM and synthetic domains are exploited to bypass #cybersecurity. Tactic: Hijacking of a popular content-sharing service for #malware traffic. Scale: 340 samples and 224 domains. Alert: Detections surged August 2025. Details at https:\u002F\u002Ft.co\u002Fk0S6KTa7PX https:\u002F\u002Ft.co\u002FyVuOFeYwvR","A malware campaign is exploiting signed Remote Monitoring and Management (RMM) tools and synthetic domains to bypass cybersecurity defenses, leveraging a compromised content-sharing service for command-and-control traffic. The campaign spans 340 malware samples across 224 domains with a sharp surge in detections in August 2025.",null,"https:\u002F\u002Fx.com\u002FUnit42_Intel\u002Fstatus\u002F2034740039465259141","2026-03-19T21:13:23+00:00","2026-03-19T22:00:18.425652+00:00",8,[],"89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5",{"id":16,"icon":10,"name":18,"slug":19},"Malware","malware",[21,26,31],{"category":22},{"id":23,"icon":10,"name":24,"slug":25},"02371804-cf6d-4449-98de-f1a2d4d9b266","Tools","tools",{"category":27},{"id":28,"icon":10,"name":29,"slug":30},"26b0b636-0e31-4db1-bffb-61bdf9f20a58","Supply Chain","supply-chain",{"category":32},{"id":33,"icon":10,"name":34,"slug":35},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[37,40],{"type":19,"value":38,"context":39},"Signed RMM abuse","Malware campaign leveraging legitimate RMM tools with valid signatures to evade detection",{"type":19,"value":41,"context":42},"Synthetic domain infrastructure","224 domains generated\u002Fused for malware distribution and C2 communications",[]]