Remote Mismanagement: A Guide to RMM Abuse

Abstract:

RMM (Remote Monitoring and Management) tools have been increasingly abused by threat actors as persistence tools. This talk examines a variety of RMM tools abused by threat actors and the attack methods utilized to trick victims into running them. The talk utilizes real-world incidents to identify adversarial trends and attacker TTPs (Tactics, Techniques, and Procedures).