remote monitoring and management

Cisco Talos details tactics to frustrate attackers in networks
Eight Talos researchers recommend deception, behavior-based detection, RMM allowlisting and tighter AI agent boundaries to make adversary operations slower and noisier.

Microsoft: Phishing Campaigns Abuse MSP360 RMM for Persistent Access
Microsoft Defender Experts says attackers used fake meeting and PDF lures to install legitimate MSP360 remote management software, then added ScreenConnect as a backup channel.