Tag: remote access tools

3 Attack Reports | 0 Vulnerabilities

Attack reports

Uptick in Bomgar RMM Exploitation

Since early April 2026, security researchers have observed a significant increase in attacks targeting Bomgar remote monitoring and management instances, exploiting CVE-2026-1731, a critical vulnerability disclosed in February. Threat actors have compromised Bomgar RMM to target downstream customer…
screenconnect
ransomware
lockbit
anydesk
byovd
remote access tools
simplehelp
atera
CVE-2026-1731
2026-04-17
bomgar
msp targeting
poisonkiller
rmm exploitation
Published: April 17, 2026
Linked vulnerabilities : CVE-2026-1731 (CVSS 9.9)
Downloadable IOCs: 5

Phishing Campaign Targeting Companies via UpCrypter

A sophisticated phishing campaign has been identified, utilizing carefully crafted emails to deliver malicious URLs linked to convincing phishing pages. These pages entice recipients to download JavaScript files that act as droppers for UpCrypter, a malware that ultimately deploys various remote ac…
obfuscation
phishing
persistence
anti-analysis
dcrat
purehvnc
remote access tools
anti-vm
global campaign
2025-08-26
upcrypter
babylon rat
Published: August 26, 2025
Downloadable IOCs: 29

Protecting Against RCE Attacks Abusing WhatsUp Gold Vulnerabilities

Trend Micro researchers identified remote code execution attacks on WhatsUp Gold exploiting the Active Monitor PowerShell Script since August 30. These attacks possibly leveraged vulnerabilities CVE-2024-6670 and CVE-2024-6671, which were patched on August 16. The timeline suggests that some organi…
atera agent
CVE-2024-6670
CVE-2024-6671
2024-09-18
remote access tools
splashtop remote
whatsup gold
radmin
Published: September 18, 2024
Linked vulnerabilities : CVE-2024-4885 (CVSS 9.8), CVE-2024-6670 (CVSS 9.8), CVE-2024-6671 (CVSS 9.8)
Downloadable IOCs: 8
Click here to see more Attack Reports