From ScreenConnect to Hive Ransomware in 61 hours

In 2022, The DFIR Report observed an increase in the adversarial usage of Remote Management and Monitoring (RMM) tools. When compared to post-exploitation channels that heavily rely on terminals, such … Read More

The post From ScreenConnect to Hive Ransomware in 61 hours appeared first on The DFIR Report.

adversarial cobaltstrike dfir exploitation hive hive ransomware management monitoring post-exploitation ransomware remote management report rmm screenconnect the dfir report tools wmiexec