logo

How attackers use real IT tools to take over your computer

ID: 5a3c9939-aa4b-5357-bd2d-945e597b5b71

STIX ID: report--5a3c9939-aa4b-5357-bd2d-945e597b5b71

Feed Name: Malwarebytes Blog

Threat Score
70/100

Date Published: 2025-12-03

Date Updated: 2026-04-28

...
...

**Malicious use of legitimate RMM tools to gain remote control:** Attackers are distributing pre-configured installers for legitimate RMM software (e.g., GoToResolve/LogMeIn Resolve) via phishing and fake download pages so infected machines auto-register to attacker accounts (via a hardcoded CompanyId), enabling stealthy, persistent remote access; the report includes telemetry examples, phishing screenshots, filenames, and defensive recommendations.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.