A new campaign shows how phishing abuses RMM tools for access. See how phishing abuses RMM tools like MSP360 to install ScreenConnect clients.

A new campaign shows how phishing abuses RMM tools for access. See how phishing abuses RMM tools like MSP360 to install ScreenConnect clients.
Attackers Abuse MSP360 to Deploy ScreenConnect in Dual-RMM Phishing Attacks reconbee.com/attackers-ab...
Microsoft warns of phishing campaigns abusing a signed MSP360 installer disguised as invites, PDFs, and update prompts. After install, attackers deploy ScreenConnect for persistent remote access and credential theft. #MSP360 #ScreenConnect #RMM
Phishing crews are abusing MSP360 to install ScreenConnect and get hidden remote access. #Security #RMM #Phishing #MSP360 #ScreenConnect #CyberThreats #RemoteAccess #DualRMM https://thedailytechfeed.com/phishing-gang-misuses-msp360-to-install-screenconnect-behind-the-scenes/
Remote tools like MSP360 and ScreenConnect are now used in phishing disguises—Zoom or PDF installs mask full control of PCs. #RemoteAccess #Cybersecurity #MSP360 #ScreenConnect #Phishing https://thedailytechfeed.com/hackers-masquerade-remote-access-tools-as-zoom-pdf-to-hijack-pcs/
Signed RMM tools as malware: phishing installs MSP360, then silently adds ScreenConnect. https://intel.threadlinqs.com/threat/TL-2026-2788 #ThreatIntel #MSP360 #ConnectWise #ScreenConnect