Threat actors are abusing trusted remote monitoring and management (RMM) software to gain legitimate-looking access to Windows endpoints before deploying a previously undocumented .NET remote access trojan dubbed AgtaBackup RAT. The operation starts with a fraudulent Microsoft Store-style page impersonating a popular videoconferencing application,... Weiterlesen: Attackers Hid Behind Trusted RMM Software Before Deploying a Full Sur…
Intelligence View
⚡ tsecurity.de Intelligence
Attackers Hid Behind Trusted RMM Software Before Deploying a Full Surveillance RAT
Threat actors are abusing trusted remote monitoring and management (RMM) software to gain legitimate-looking access to Windows endpoints before deploying a…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
🔍 CTI & Forensik
2
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
MITRE ATT&CK Matrix Navigator
T1071TA0011 · Command and Control
Application Layer Protocol (C2)
Mitigation: M1031 Network Intrusion Prevention & Egress Filtering
Quelle: Kontext-Klassifikation des Artikeltextes · Konfidenz 80%
Egress-Filtering einführen, DNS-Monitoring aufrichten, Netzwerk-Logs nach C2-Beacon-Mustern durchsuchen.
Command and Control
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — kostenlos Täglich die wichtigsten Security-News · jederzeit abbestellbar
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
Noch keine Leser-Bewertungen
War diese Seite hilfreich?
0
Powered by tsecurity.de
tsecurity.de Hub
Verwandte Story-Cluster & Quellen (Vektor-KI)
14 Quellen
Security: Denial of Service in ags (Fedora)
13 weitere Quellen
PPro-Linuxvor 2 Std.Security: Denial of Service in mingw-qt6-qt5compat (Fedora) VVulDB Updatesvor 3 Std.CVE-2026-121386 | FreeRDP up to 3.32.1 WinPR denial of service (Nessus ID 375599) PPro-Linux Securityvor 2 Std.Denial of Service in mingw-qt6-qt5compat (Fedora) PPro-Linux Securityvor 2 Std.Denial of Service in ags (Fedora) VVulDB Updatesvor 6 Std.CVE-2022-48492 | Huawei EMUI/Magic UI Configuration denial of service (EUVD-2022-51188) VVulDB Updatesvor 6 Std.CVE-2022-48493 | Huawei EMUI/Magic UI Configuration denial of service (EUVD-2022-51189)
+7
13 Quellen
CVE-2026-99257 | Linux Kernel up to 7.2.12 Gpio Shared null pointer dereference (Nessus ID 375602)
12 weitere Quellen
VVulDB Updatesvor 3 Std.CVE-2026-99255 | Linux Kernel up to 7.2.13 io-wq io_uring_cancel_generic cur_work race condition (Nessus ID 375597) VVulDB Updatesvor 3 Std.CVE-2026-99260 | Linux Kernel up to 7.2.12 ntfs ntfs_new_attr_flags behavioral workflow (Nessus ID 375596) VVulDB Updatesvor 3 Std.CVE-2026-99244 | Linux Kernel up to 7.3.0 pid_namespace zap_pid_ns_processes race condition (Nessus ID 375592) VVulDB Updatesvor 8 Std.CVE-2024-36978 | Linux Kernel up to 6.10-rc2 sch_multiq multiq_tune out-of-bounds write (affc18fdc694 / Nessus ID 207802) VVulDB Updatesvor 6 Std.CVE-2026-64312 | Linux Kernel up to 7.1.3 pcrypt pcrypt_aead_done improper synchronization (Nessus ID 375470) VVulDB Updatesvor 6 Std.CVE-2026-74684 | Linux Kernel up to 6.18.44/7.1.8 tap tap_get_user_xdp null pointer dereference (Nessus ID 375470)
+6
10 Quellen
PikaPods: Host Any Open-Source Apps Without a VPS Server
9 weitere Quellen
ZZDNETvor 3 Std.Filing bugs for open-source apps is a huge help for developers – and easier than you think HHelp Net Securityvor 1 Std.Ghostunnel: Open-source TLS proxy with mutual authentication ZZDNETvor 3 Std.Filing bugs for open-source apps is a huge help for developers – and easier than you think ZZDNETvor 3 Std.Filing bugs for open-source apps is a huge help for developers – and easier than you think ZZDNETvor 3 Std.Filing bugs for open-source apps is a huge help for developers – and easier than you think DDEV Communityvor 3 Std.How I Vet an Open-Source Dependency Before Betting On It
+3
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/de/4215181/it-security-nachrichten/attackers-hid-behind-trusted-rmm-software-before-deploying-a-full-surveillance-rat/