Proofpoint, Thursday, February 19th, 2026
(Don't) TrustConnect: It's a RAT in an RMM hat
RMM tools continue to be many attackers' top choice for initial access. Such enterprise remote support software like SimpleHelp, SuperOps, Datto, N-able and others are frequently delivered via email campaigns by cybercrime actors or used as follow-on payloads once an actor achieves initial access.
more →