Workspace ONE Unified Endpoint Management - Tool

Overview

Workspace ONE Unified Endpoint Management (UEM) is VMware's platform for centralized provisioning, security policy enforcement, and remote management across multiple device types (Windows, macOS, iOS, Android). It enables IT to deploy apps, enforce configurations, and monitor endpoints from a single console. Because it consolidates control over managed devices, it represents a high-value attack surface: if compromised, an adversary could push malicious configurations or software, exfiltrate data, or maintain persistence across enterprise devices.

Related Threat Clusters

• Airstalk Malware Exploits MDM Tools in Supply Chain Attacks

  A new malware variant named Airstalk has been discovered, linked to suspected nation-state hackers. This malware targets mobile device management tools, specifically leveraging the AirWatch API to create covert…

  1 article · Updated November 3, 2025
• Airstalk Malware Exploits MDM Tools in Supply Chain Attacks

  Palo Alto Networks’ Unit 42 has identified a new malware campaign named Airstalk, linked to a suspected nation-state actor. This malware targets mobile device management tools, specifically leveraging the AirWatch API…

  2 articles · Updated November 3, 2025

Recent Intelligence Reports

• Warning issued of new nation state malware targeting browsers — Computing · November 3, 2025

Related Entities