US Identified as Primary Target in Global RMM Phishing Campaign

A phishing campaign leveraging fake documents to install RMM software has targeted 46 countries, with the US being the top geographic focus. The attackers use rapidly rotating infrastructure, complicating detection and highlighting the need for advanced behavioral analysis.

An RMM phishing campaign initially associated with Canadian targeting due to its use of Canada Revenue Agency (CRA) tax forms as lures has turned out to be part of a broader campaign spanning 46 countries.

Around 45% of observed activity was associated with the United States, making it the campaign's top geographic target. ANY.RUN research connected 601 cases to the wider operation, which uses

Read original article