Ongoing #phishing emails use fake notices and invitation lures to lead potential victims to install a legitimate #Zecurit Agent RMM configured by the attackers. The installers have deceptive names, like documentpdf[.]exe and ViewDoc[.]exe. Details at bit.ly/4sviMB6
The latest research and news from Unit 42, the Palo Alto Networks (@paloaltontwks) Threat Intelligence and Security Consulting Team covering incident response.

