As cited
Copy frozen at (site build).
threat intel
Managed for Malice: How Attackers Turn MDM into Remote Access
Future-dated: the source dates this story 2026-10-28, after the tracker first saw it, so it is shown by first seen.
Attackers exploit legitimate mobile device management (MDM) platforms to install unauthorized remote monitoring and management (RMM) tools, establishing persistent remote access to compromised devices. This technique leverages the trust placed in MDM systems to bypass detection and maintain a foothold on target infrastructure.
Why it matters: Organizations relying on MDM solutions face risk of attackers using these systems as conduits for unauthorized access; practitioners should audit MDM configurations, monitor for unusual RMM installations, and restrict MDM administrative privileges to prevent this attack pathway.
- Source published
- First seen by Cybersecurity Tracker