Sectigo

A 46-country phishing chain ends by installing the RMM tools allow lists already trust

Any.Run's researchers found a phishing kit running in 46 countries whose final payload is a signed copy of ScreenConnect or GoTo Resolve, which moves the defensive question from malware signatures to which remote-access tools may execute at all.