Tag: mesh agent

2 Attack Reports | 0 Vulnerabilities

Attack reports

Signed malware impersonating workplace apps deploys RMM backdoors

Multiple phishing campaigns were identified using workplace meeting lures, PDF attachments, and abuse of legitimate binaries to deliver signed malware. The attacks used digitally signed executables masquerading as legitimate software to install remote monitoring and management (RMM) tools like Scre…
screenconnect
phishing
rmm
persistence
lateral movement
mesh agent
digital signatures
2026-03-04
tactical rmm
workplace impersonation
Published: March 4, 2026
Downloadable IOCs: 20

Operation Phantom Enigma

A malicious campaign targeting primarily Brazilian residents has been discovered, with attacks detected since early 2025. The attackers employed phishing emails, some sent from compromised company servers, to distribute malware. Two attack chains were identified: one using a malicious browser exten…
phishing
powershell
stealer
banking
browser extension
2025-06-05
mesh agent
pdq connect agent
Published: June 5, 2025
Downloadable IOCs: 0
Click here to see more Attack Reports