Managed for Malice: How Attackers Turn MDM into Remote Access
Attackers abuse legitimate MDM platforms to deploy rogue RMM tools, turning device management into a pathway for remote access and persistence.
Ben Nahorney has been at this long enough to fondly remember a time when ransomware just asked for gift cards. But no matter the endgame, Ben's goal remains the same: to scope out, unravel, and report on what's happening in the threat landscape. He's just as at home exploring a new attack chain as he is stepping back to map out where the whole landscape is heading. Either way, he wants to make sure it's worth your time, whether you're knee-deep in an incident or just threat-curious.
Attackers abuse legitimate MDM platforms to deploy rogue RMM tools, turning device management into a pathway for remote access and persistence.
Threat actors are exploiting GTA6 hype with fake leaked downloads spread via SEO poisoning, packed with RATs, infostealers, and wiper ransomware. Here’s what Huntress found.
Huntress researcher uncovers post-Black Hat & DEF CON phishing campaign using X DMs & malicious documents to deliver AMOS, NetSupport RAT, and other malware.
See how a SQL injection bug led to full OS-level RCE, as attackers abused Oracle Java Source to deploy the khunt post-exploitation toolkit.