Fake Video Meeting Invites Trick Users Into Installing RMM Tools

Attackers are using convincingly spoofed video-conference invites and fake meeting landing pages to trick users into installing a digitally signed remote monitoring and management (RMM) tool presented as a critical application update; once installed (examples include Datto RMM, LogMeIn, ScreenConnect) the tools grant remote administrative access and a persistent foothold while evading signature-based defenses, according to Netskope.