Criminals Launch RAT-as-a-Service via Fake RMM Vendor

Cybercriminals created a fake remote management vendor that sells a remote access trojan (RAT) disguised as legitimate enterprise software for $300 a month. This scheme exploits the growing trend of using remote monitoring and management (RMM) tools for cyberattacks, affecting organizations that may unknowingly purchase the malicious software. Researchers at Proofpoint identified this operation in late January 2026.