Security · 1h ago
Fake Teams Update Delivers RMM Tools in Phishing Campaign
A phishing campaign dubbed Operation BlueDash uses fake Microsoft Teams update pages to trick victims into installing legitimate remote monitoring tools Level RMM and ScreenConnect. Attackers compromised web infrastructure to display counterfeit Microsoft Store pages. The campaign targets users with 'secure document' lures, researchers at ZeroBEC reported.
Meridian48 take
The use of legitimate RMM tools in attacks blurs the line between admin and attacker, making detection harder for defenders.
Read the full reporting
Operation BlueDash Deploys Level RMM and ScreenConnect via Fake Teams Update →
The Hacker News
phishingremote-monitoring-tools