← Incidents
INCIDENT 741PhishingLOW / UNDER REVIEWSourced
Phishing Abuses RMM Tools for Persistent Access
Microsoft observed phishing campaigns that abused MSP360 RMM to deploy ScreenConnect, creating redundant remote-access channels for follow-on activity The post Phishing Abuses RMM Tools for Persistent Access appeared first on Microsoft Security Blog .
Last evidence update
29 SEP 2026 · 21:39 UTC
Source count
1
Status
reported
Observation history
How this record has evolved as evidence accumulated.
30 SEP · 05:22 UTC
Initial report
Evidence