As cited
Copy frozen at (site build).
ransomware
Employee Monitoring and SimpleHelp Software Abused in | Huntress
Huntress researchers identified ransomware operations leveraging employee monitoring software and SimpleHelp remote management tools to establish persistence and deploy ransomware payloads. Attackers are exploiting legitimate administrative tools to evade detection and maintain access to victim systems.
Why it matters: Organizations using employee monitoring or SimpleHelp RMM are at immediate risk if these tools fall under attacker control; security teams should audit access controls and monitor for suspicious activity within these platforms.
- Source published
- First seen by Cybersecurity Tracker