Microsoft UpdateALERT Medium

Phishing Abuses RMM Tools for Persistent Access

Microsoft observed phishing campaigns that abused MSP360 RMM to deploy ScreenConnect, creating redundant remote-access channels for follow-on activity The post Phishing Abuses RMM Tools for Persistent Access appeared first on Microsoft Security Blog.

Impact

Review the update details and guidance.

Recommended Action

Read the blog post for update guidance and deployment notes.

Published: 9/29/2026, 9:39:27 PMSource: Microsoft Security BlogTags: Phishing Social engineering