Windows Remote Access Connection Manager

Platform

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

December 24, 2025

Last Seen

February 11, 2026

API

The Windows Remote Access Connection Manager (RasMan) is a Windows service that manages remote access connections (VPN, dial-up, and other remote networking) for the operating system.

Overview

Recent Events

Relationships

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Related Clusters (3)

Related Entities

Malware Zero-day Exploit Phishing Denial of Service Data Breach DDoS AWS Azure Outlook SAP CVE-2026-21514 CVE-2026-21519

Windows Remote Access Connection Manager

Overview

Recent Events

Profile

Malware

CVEs

Tools

Attack Types

Relationships

Related Clusters (3)

Microsoft Addresses Six Actively Exploited Zero-Day Vulnerabilities

WebRAT Malware Distributed via GitHub Exploits

Critical Windows Shell Zero-Day Vulnerability Exploited

Related Articles (4)

February 2026 Patch Tuesday: Six new and actively exploited Microsoft vulnerabilities addressed

Microsoft Patch Tuesday matches last year’s zero

Microsoft’s February 2026 Patch Tuesday Addresses 54 CVEs (CVE-2026-21510, CVE-2026-21513)

Webrat turns GitHub PoCs into a malware trap

Related Entities