Content by Microsoft Security Research, Parasharan Raghavan, Deva Kanna Kannan and Sai Chakri (1)

Microsoft Security Research, Parasharan Raghavan, Deva Kanna Kannan and Sai Chakri break down a July 2026 phishing campaign that delivered a legitimate MSP360 RMM installer under deceptive filenames, then used it to deploy ScreenConnect for redundant remote access. The post includes detection coverage, mitigations, and KQL hunting queries.
News

End of content

Rejoining the server...

Rejoin failed... trying again in seconds.

Failed to rejoin.
Please retry or reload the page.

The session has been paused by the server.

Failed to resume the session.
Please reload the page.