AA23-025A: Protecting Against Malicious Use of Remote Monitoring and Management Software

Original release date: January 25, 2023

Summary

The Cybersecurity and Infrastructure Security Agency (CISA), National Security Agency (NSA), and Multi-State Information Sharing and Analysis Center (MS-ISAC) (hereafter referred to as the “authoring organizations”) are releasing this joint Cybersecurity Advisory (CSA) to warn network defenders about malicious use of legitimate remote monitoring and management (RMM) software. In October 2022, CISA identified a widespread cyber campaign involving the malicious use of legitimate RMM software. Specifically, cyber criminal actors sent phishing emails that …

advisory agency analysis campaign center cisa csa cyber cybersecurity cybersecurity advisory defenders information information sharing infrastructure infrastructure security isac january malicious management monitoring ms-isac national national security national security agency network network defenders nsa october organizations protecting release remote monitoring remote monitoring and management rmm security sharing software state