Field Analysis
Two RMM Agents Are Not Redundancy, They Are Persistence
Microsoft documented a July 2026 campaign dropping MSP360 RMM v2.5.0.67 as the initial agent and ConnectWise ScreenConnect as a second channel. ANY.RUN tracked the wider operation across 46 countries, with 94% of its kit URLs alive for a single day.
Read more:Microsoft Security BlogThe Hacker News