An IRS-Themed Lure Installing Signed RMM Tooling
•
9 min read
•
Advanced
Threat Hunting
Incident Response
Phishing
RMM
ScreenConnect
A user ran a file called ID.me_IRS_VM_REC_Secure_Verification_Gateway-1664459__<date>-166445992WW.EXE out of their Downloads folder, and what followed was a chain of software installations that each …
Read More →