Trusted Tools in Untrusted Hands: RMM Abuse Hiding in Plain Sight

RMMs, or remote monitoring and management tools, are just about everywhere in IT. And for good reason. They give teams fast access to keep things running (and fix obvious "Layer 8s"). Your organization's tech whiz down the hall can see your screen and move your mouse, all while looking like a normal remote session.

Now put that same access in the hands of an attacker, and they can run commands, move across every machine on the network, and quietly disable the security tools watching them. It's the perfect setup for ransomware, running through the same trusted channel IT teams rely on every day.

In this live virtual event, we'll break down why RMMs create such a persistent threat, one where we've seen abuse jump 277% year over year. But we'll end on a high note, showing you what it takes to close the gap, beyond visibility alone.

Watch Now
By submitting this form, you accept our Terms of Service & Privacy Policy
Dray Agha profile picture
Dray Agha
Senior Manager, Tactical Response
LinkedIn icon
Matt Caldwell
Matt Caldwell
Director of Fraud Prevention, AnyDesk Software
LinkedIn icon

Related Resources

Read more about 2026 Cyber Threat Report
2026 Cyber Threat Report
Report

Stay ahead of cyber threats with the Huntress 2026 Cyber Threat Report. Uncover last year’s cyberattacks, get key industry insights, and develop strategies to outsmart the most malicious hackers.

Read more about What is Lateral Movement?
What is Lateral Movement?
Video

Once attackers are inside, the first machine they land on usually isn't the one they want. Lateral movement is how they work their way deeper into your environment, using the same remote access tools your admins rely on every day.

Read more about Know Your Adversary: Counter Operations That Wreck Global Cybercrime
Know Your Adversary: Counter Operations That Wreck Global Cybercrime
On-Demand Virtual Event

Go inside Operation Riptide with John Hammond, Kyle Hanslovan, and FBI AD Brett Leatherman to see how defenders disrupt and arrest global cybercrime groups.

[Summary text goes here]