Navigating the SMB Threat Landscape: Key Insights from Huntress’ SMB Threat Report

Huntress’ Q3 2023 SMB Threat Report describes a shift toward malware-free intrusions using LOLBins and scripting, widespread abuse of RMM tools for persistence and remote access, escalating identity attacks and BEC in Microsoft 365 (notably malicious inbox rules and unusual logins), and a diversified ransomware ecosystem where LockBit is prominent but many lesser-known strains prevail—emphasizing the need for behavioral detections and identity-centric visibility beyond traditional anti-malware controls.