09-09-2026
Phishing Attacks Serve Browser-in-the-Browser Pages, Rogue RMM Persistence
https://www.huntress.com/blog/phishing-bitb-rmm-attacks
Report completeness: High
Threats:
Bitm_technique
Screenconnect_tool
Trojan:win32/commando.a
Industry:
Education
TTPs:
Tactics: 1
Technics: 0
ChatGPT TTPs:
do not use without manual checkT1036, T1036.005, T1059.003, T1105, T1204.002, T1219, T1543.003, T1566.002
IOCs:
File: 5
Url: 7
Domain: 6
IP: 1
Path: 1
Hash: 4
Email: 0
BrowserExtension: 0
Soft:
Gmail, curl, Microsoft Defender
Algorithms:
sha256
Languages:
javascript