Criminals using fake enterprise software to gain access to company systems

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Criminals Launch RAT-as-a-Service via Fake RMM Vendor Cybercriminals created a fake remote management vendor that sells a remote access trojan (RAT) disguised as legitimate enterprise software for $300 a month. This scheme exploits the growing trend of using remote monitoring and management (RMM) tools for cyberattacks, affecting organizations that may unknowingly purchase the malicious software. Researchers at Proofpoint identified this operation in late January 2026. 7 sources 40