26-09-2026
The Rogue RMM Stack: One Phish, Multiple Persistence Paths
https://www.huntress.com/blog/rogue-rmm-abuse-phishing-persistent-access
Report completeness: Low
Threats:
Itarian_tool
Screenconnect_tool
TTPs:
Tactics: 1
Technics: 0
ChatGPT TTPs:
do not use without manual checkT1105, T1204.001, T1204.002, T1219, T1566.002
IOCs:
File: 1
IP: 0
Domain: 0
Url: 0
Hash: 0
Email: 0
BrowserExtension: 0
Soft:
Microsoft 365
Algorithms:
zip