CISA-NSA alert provides details on ‘malicious use’ of remote monitoring software, mitigation tactics

CISA and the National Security Agency have issued an alert detailing adversary efforts to infiltrate two federal agency networks through monitoring and management software, and steps organizations should take to protect themselves against future “malicious” activities.

“In October 2022, CISA identified a widespread cyber campaign involving the malicious use of legitimate RMM software. Specifically, cyber criminal actors sent phishing emails that led to the download of legitimate RMM software—ScreenConnect (now ConnectWise Control) and AnyDesk—which the actors used in a refund...