Crazy Ransomware Gang Exploits Employee Monitoring Tools for Attacks

Crazy Ransomware Gang Exploits Employee Monitoring Tools for Attacks

First seen 12 Feb 2026, 01:27 UTC HuntressBleepingcomputerGbhackersCybersecuritynewsCyberpress+8 84% similarity 48.1

Article Content

Browse articles
ThreatCluster

The Crazy ransomware gang has been observed exploiting legitimate employee monitoring software, specifically Net Monitor for Employees Professional, along with the SimpleHelp remote support tool. This tactic allows them to maintain persistence in corporate networks, evade detection, and prepare for ransomware deployment, affecting organizations that utilize these tools for employee productivity tracking.

ThreatCluster AI

Timeline

2026-02-11
Huntress reports on ransomware gang's use of monitoring tools
2026-02-11
Bleepingcomputer publishes details of the attacks

Community

Browse all →