Hackers use RMM tools to breach freighters and steal cargo shipments

Researchers observed an active campaign since at least January that targets freight brokers, carriers, and supply-chain providers with tailored phishing and load-board compromises to deliver RMM tools (e.g., ScreenConnect, NetSupport, PDQ Connect) and information stealers; attackers then use remote access to modify bookings, intercept or reroute shipments, impersonate carriers, harvest credentials, and facilitate physical cargo theft across multiple countries.