Tag: rmm abuse

2 Attack Reports | 0 Vulnerabilities

Attack reports

Rogue ScreenConnect: Common Social Engineering Tactics Seen in 2025

In 2025, there was a significant increase in rogue ScreenConnect installations, part of a broader trend of threat actors abusing remote monitoring and management tools (RMMs). These tools were used to gain access, blend in, move laterally, and maintain persistence in target systems. Attackers emplo…
screenconnect
social engineering
remote access
rmm abuse
2025-12-31
lures
Published: December 31, 2025
Downloadable IOCs: 14

A Series of Unfortunate (RMM) Events

Series of Unfortunate Events Summary: This analysis examines the increasing trend of threat actors abusing Remote Monitoring and Management (RMM) tools in their attacks. The report highlights a specific pattern where attackers use PDQ or GoTo Resolve to deploy secondary RMM tools like ScreenConnect…
screenconnect
phishing
social engineering
persistence
simplehelp
2025-12-19
goto resolve
multiple rmm tools
pdq
rmm abuse
Published: December 19, 2025
Downloadable IOCs: 0
Click here to see more Attack Reports