Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
2 IOCs
Hackers Use Fake Zoom and PDF Installers to Deploy Remote Access Tools on Windows PCs
Excerpt
Hackers are using fake Zoom installers, PDF reader updates, and meeting invitations to trick Windows users into installing legitimate remote management software. Microsoft Defender Experts observed these phishing campaigns in July 2026, targeting organizations across multiple industries. The attacks delivered MSP360 Remote Monitoring and Management (RMM) version 2.5.0.67 under misleading filenames. Although the installer was digitally signed and legitimate, attackers used it…
Read the original report →Indicators of Compromise
Open the mindmap →2 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| SHA256 | 108ef7e628d7a20bd6241a5b57149e27a6061f467123eb64061975559f8f73dc | High | Score 83/100 | First seen |
| SHA1 | f34330d4c6e0aa978dc3af40360c14b31ad51127 | High | Score 56/100 | First seen |
IOC Relationship Graph
Building graph…