MSP360

Microsoft: Phishing Campaigns Abuse MSP360 RMM for Persistent Access
Microsoft Defender Experts says attackers used fake meeting and PDF lures to install legitimate MSP360 remote management software, then added ScreenConnect as a backup channel.