SecurityThe Hacker Newsabout 3 hours ago
Microsoft Warns of Dual-RMM Phishing Attacks
3 min read
Microsoft detected phishing campaigns in July 2026 that distribute a signed MSP360 RMM installer disguised as meeting invitations and software updates. Once executed, it establishes remote access, then installs ConnectWise ScreenConnect for a redundant channel. Attackers stage payloads on Amazon S3, Dropbox and GitLab, and a parallel campaign swapped MSP360 for Faronics Deploy Agent.
Level
Hype check
Tap to vote and see what everyone thinks.
In this storyMicrosoft
