--- title: "RMM Tools: A Gateway for Bulk Attacks" url: https://daily.dev/posts/rmm-tools-a-gateway-for-bulk-attacks-42exl6jnf source_url: https://www.huntress.com/blog/remote-monitoring-management-tools-gateway-for-attacks-on-msp-pt-1 type: article source: "Huntress Blog" published: 2026-05-31T07:42:56.895Z updated: 2026-05-31T08:07:17.006Z tags: ["cyber", "ransomware"] reading_time: 7 upvotes: 0 comments: 0 language: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # RMM Tools: A Gateway for Bulk Attacks **[Huntress Blog](https://daily.dev/sources/huntress-blog)** · 7 min read · 0 upvotes · 0 comments ## Summary Threat actors continue to exploit Remote Monitoring and Management (RMM) tools to compromise MSPs and their downstream customers at scale. A June 2025 incident analyzed by Huntress shows a threat actor who compromised an MSP's Atera RMM instance, then used it to target three customer organizations — adding rogue local admin accounts and installing Cloudflared tunnels for persistent access. The attack mirrors the 2021 Kaseya VSA supply chain attack in approach. RMM abuse accounted for 17.3% of all remote access methods in Huntress' 2025 Cyber Threat Report. Defensive recommendations include auditing authorized RMM tools, enforcing VPN-only access, implementing application controls, reviewing execution logs, deploying EDR, and keeping RMM software patched. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [RMM Abuse: How Attackers Exploit Remote Access Tools](https://daily.dev/posts/rmm-abuse-how-attackers-exploit-remote-access-tools-kmwmtlqwz) · Huntress Blog · 0 upvotes · 0 comments - [RMM Abuse Explodes as Hackers Ditch Malware](https://daily.dev/posts/rmm-abuse-explodes-as-hackers-ditch-malware-v44l6tyt4) · Dark Reading · 0 upvotes · 0 comments --- Tags: [#cyber](https://daily.dev/tags/cyber), [#ransomware](https://daily.dev/tags/ransomware) [View this post on daily.dev](https://daily.dev/posts/rmm-tools-a-gateway-for-bulk-attacks-42exl6jnf)