RATs! Remote Management Software from the Hacker’s Perspective
ID: eaf92744-8793-5de0-bd1a-5a2b7834884a
STIX ID: report--eaf92744-8793-5de0-bd1a-5a2b7834884a
Feed Name: Huntress Blog
A recap of a Tradecraft Tuesday episode covering adversary abuse of RMM/RAT tools—overlapping with C2—for persistence and remote access, the challenges of detecting this at scale, and practical hunting tips; it cites that ~65% of Q3 2023 incidents involved RMM weaponization, references a ScreenConnect-based “Bitter Pill” case in healthcare/pharma, and demonstrates silent AnyDesk persistence via a Sliver beacon, with links to watch on demand.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.