The Phishing Email That Installs Your IT Tools: Microsoft Finds Attackers Using RMM Software as the Payload
Microsoft’s Defender Experts documented phishing campaigns whose payload was legitimate, digitally signed IT management software. No exploit, no classic malware, and a chain that stopped whenever a user declined the admin prompt.