CISA says federal agencies attacked in refund scam through remote management software

At least two federal civilian agencies were exploited by cybercriminals as part of a refund scam campaign perpetrated through the use of remote monitoring and management (RMM) software.

The Cybersecurity and Infrastructure Security Agency (CISA), National Security Agency, and Multi-State Information Sharing and Analysis Center (MS-ISAC) said on Wednesday they discovered the campaign in October. One federal office was exploited in June and another was attacked in September. 

“Specifically, cyber criminal actors sent phishing emails that led to the download …

agency analysis campaign center cisa cybercriminals cybersecurity exploited federal federal agencies information information sharing infrastructure infrastructure security isac june management monitoring ms-isac national national security national security agency october office refund remote management remote monitoring remote monitoring and management rmm scam security september sharing software state