More RMM Tools In the Wild, (Tue, Oct 6th)
Cybersecurity Classified by Officially
It seems that a trend started… I continue my journey discovering more RMM ("Remote Management & Monitoring") tools abused by threat actors! A few days ago, I wrote a diary[1] about ScreenConnect used in the wild. Today, I found another one.
This is an extract. The publication continues at the source.
Read the original at the source: https://isc.sans.edu/diary/rss/33400
Officially imported this from SANS Internet Storm Center’s own source and shows an extract. If you work there, claiming the profile and verifying the domain lets you choose to show the full text here.
This publication has changed since it was first published
2 versions recorded. The original is kept in full — nothing is overwritten.
- v2 imported change on current
- v1 as first published on
Provenance
- Organization
- SANS Internet Storm Center — imported from official source
- Official source
- https://isc.sans.edu/rssfeed.xml RSS
- Imported
- October 06, 2026 10:00
- Versions
- 2 recorded
- Identity
-
https://isc.sans.edu/diary/rss/33400