Frequency
2
occurrences
First Seen
February 12, 2026
Last Seen
February 12, 2026
Related Threat Clusters
-
Crazy Ransomware Gang Exploits Employee Monitoring Tools for Attacks
The Crazy ransomware gang has been observed exploiting legitimate employee monitoring software, specifically Net Monitor for Employees Professional, along with the SimpleHelp remote support tool. This tactic allows them…
13 articles · Updated February 11, 2026
Recent Intelligence Reports
- SimpleHelp & Employee Monitoring Tools Abused for Ransomware — Socprime · February 12, 2026
- Who's the bossware? Ransomware slingers like employee monitoring tools, too — Theregister · February 12, 2026
Related Entities
Ransomware
Trojan
Remote Desktop Protocol
T1016 - System Network Configuration Discovery
T1021.001 - Remote Desktop Protocol
T1033 - System Owner/User Discovery
T1036 - Masquerading
T1059.001 - PowerShell
T1059 - Command and Scripting Interpreter
T1071 - Application Layer Protocol
T1078 - Valid Accounts
T1098 - Account Manipulation