In this campaign, cybercriminals utilized phishing emails to trick users into downloading reliable RMM software like ScreenConnect and AnyDesk, which they then exploited to steal money from victims’ bank accounts through refund fraud. Also, the actors could sell victim account access to other cybercriminal or advanced persistent threat (APT) actors.

Read full article on GBHackers