As cited
Copy frozen at (site build).
threat intel
Uptick in Bomgar RMM Exploitation
Huntress SOC has observed an increase in incidents where Bomgar remote monitoring and management instances have been compromised. The specific attack vectors and scope of affected organizations are not detailed in the brief report.
Why it matters: Organizations using Bomgar RMM should investigate their instances immediately for signs of compromise, as attackers are actively exploiting this access point to establish persistence and move laterally within networks.
- Source published
- First seen by Cybersecurity Tracker