Employees tricked into downloading remote monitoring software

New research from Malwarebytes reveals that employees are being tricked into downloading remote monitoring and management tools like AnyDesk to open up back doors to corporate networks. In a standard phishing technique potential victims are targeted via an email or SMS message, personalized to match their roles within the organization. The link in the email goes to what looks like a legitimate bank website with a link to open a chat support session. But instead of soliciting information directly, clicking the link gets them to download an excutable for the RMM tool. In the example Malwarebytes cites the attackers use… [Continue Reading]