Microsoft Warns of Phishing Campaign Using MSP360 RMM Software in Dual-RMM Attack Strategy

Microsoft has warned of phishing campaigns distributing an installer for MSP360 Remote Monitoring and Management (RMM) software disguised as meeting invitations, PDF-themed lures, software update prompts, and other social-engineering content. Once executed, the legitimate MSP360 installer, distributed under a deceptive file name, establishes remote management access on affected systems. The attack involves deploying ScreenConnect in what is described as a dual-RMM phishing attack strategy.