Frequency
4
occurrences
First Seen
February 11, 2026
Last Seen
February 13, 2026
Related Threat Clusters
-
Crazy Ransomware Gang Exploits Employee Monitoring Tools for Attacks
The Crazy ransomware gang has been observed exploiting legitimate employee monitoring software, specifically Net Monitor for Employees Professional, along with the SimpleHelp remote support tool. This tactic allows them…
13 articles · Updated February 11, 2026
Recent Intelligence Reports
- Ransomware gang abuses legitimate software for network persistence — Scworld · February 13, 2026
- Who's the bossware? Ransomware slingers like employee monitoring tools, too — Theregister · February 12, 2026
- Cybercriminals Exploit Employee Monitoring and SimpleHelp Tools in Ransomware Attacks — Gbhackers · February 12, 2026
- Crazy ransomware gang abuses employee monitoring tool in attacks — Bleepingcomputer · February 11, 2026
Related Entities
Ransomware
Trojan
Remote Desktop Protocol
T1016 - System Network Configuration Discovery
T1021.001 - Remote Desktop Protocol
T1021 - Remote Services
T1033 - System Owner/User Discovery
T1036 - Masquerading
T1059.001 - PowerShell
T1059 - Command and Scripting Interpreter
T1071 - Application Layer Protocol
T1078 - Valid Accounts