Under Siege: The threat of compromised Mobile Device Management credentials and its implications for organizational security

Group-IB researchers identified at least 1,500 stolen login/password pairs for web-based Mobile Device Management (MDM) services circulating on the dark web; 27.5% of the compromised MDM consoles were externally accessible across multiple countries, exposing organizations to device takeover, data exfiltration, and remote wipe risks. The report details operational impacts and recommends immediate mitigations: revoke compromised credentials, re-enroll devices, enable multi-factor authentication, and deploy continuous dark-web monitoring and security hygiene.