🛑 A fake Microsoft Teams update deploys two legitimate RMM tools on the same Windows host. Operation BlueDash installs Level RMM and ScreenConnect in parallel, apparently to retain remote access if one is removed. How the phishing chain works: https://thehackernews.com/2026/07/operation-bluedash-deploys-level-rmm.html

<p>🛑 A fake Microsoft Teams update deploys two legitimate RMM tools on the same Windows host.<br /> <br /> Operation BlueDash installs Level RMM and ScreenConnect in parallel, apparently to retain remote access if one is removed.<br /> <br /> How the phishing chain works: <a href="https://thehackernews.com/2026/07/operation-bluedash-deploys-level-rmm.html">thehackernews.com/2026/07/op…</a></p> <img src="https://nitter.net/pic/media%2FHOPCJdfaoAAY6e8.jpg" />