SimpleHelp Vulnerability Exploited to Deliver Novel Malware

A critical vulnerability in SimpleHelp's remote monitoring software, rated a perfect 10 in severity, was exploited by attackers to masquerade as trusted technicians and deploy brand-new malware across customer networks. This flaw allowed hackers to bypass authentication and gain unauthorized access with ease.

https://osintsights.com/simplehelp-vulnerability-exploited-to-deliver-novel-malware?utm_source=mastodon&utm_medium=social

#Cve202648558 #RemoteMonitoringAndManagement #Rmm #OpenidConnect #AuthenticationBypass

Phishing Campaign Exploits Legitimate RMM Tools to Hit 80+ Orgs

A sneaky phishing campaign has infiltrated over 80 organizations, mostly in the US, by exploiting legitimate remote monitoring and management (RMM) tools like SimpleHelp and ScreenConnect. The attackers cleverly used customized versions of these tools, already installed by the victims, to bypass defenses and…

https://osintsights.com/phishing-campaign-exploits-legitimate-rmm-tools-to-hit-80-orgs?utm_source=mastodon&utm_medium=social

#RemoteMonitoringAndManagement #PhishingCampaign #InitialAccessBroker #Ransomware #Venomoushelper