All updates
security: Signed malware impersonating workplace apps deploys RMM backdoors
Mar 3, 2026
Microsoft reports malware signed with a stolen EV certificate that masquerades as workplace apps and installs legitimate remote monitoring and management (RMM) tools to maintain persistent enterprise access.
- Source: Microsoft Security Blog