As cited
Copy frozen at (site build).
threat intel
A Series of Unfortunate (RMM) Events
Threat actors are increasingly leveraging legitimate remote monitoring and management (RMM) tools, specifically PDQ and GoTo Resolve, to deploy additional RMM tools during attacks. This represents a method for attackers to establish persistence and expand their foothold within compromised environments.
Why it matters: Organizations using PDQ and GoTo Resolve should enhance monitoring for suspicious tool deployments and lateral movement, as these legitimate platforms are being weaponized as entry points for further compromise.
- Source published
- First seen by Cybersecurity Tracker