Malware Isn't Required—How Ransomware Groups Turn Legitimate RMMs Into a Weapon

About this episode

The episode discusses how ransomware groups exploit legitimate remote monitoring and management tools instead of using custom malware.

Resources: https://linktr.ee/ReliaQuestShadowTalk Join hosts John and Tehman as they discuss: What attackers prefer over custom malwareHow signature-based detection failsProactive governance vs. reactive triageJohn Dilgen: Cyber Threat Intelligence Analyst at ReliaQuest, where he specializes in researching cyber threats impacting ReliaQuest customers. With a strong technical background, he previously served as an Incident Response Analyst and Trainer at ReliaQuest. Tehman Tariq: Sr. Manager o...

Topics covered

• ransomware
• cybersecurity
• malware
• RMMs
• threat intelligence

Keywords

• cyber threats
• signature-based detection
• proactive governance
• reactive triage

Mentioned in this episode

Products: RMMs

More episodes of ShadowTalk: Powered by ReliaQuest

• China-Linked Cyber Espionage: How OP-512 Exploited Legacy IIS Servers and Evaded Detection · June 10, 2026 · 23 min
• SonicWall, MFA Bypass, IABs: Why Patched Devices Are Still Handing Attackers Initial Access · June 3, 2026 · 21 min
• Device Code, OAuth, PhaaS: How Session Token Theft is Breaking the Phishing Playbook · May 27, 2026 · 29 min
• SQLite, Mistral, OpenAI: How AI Attacks Are Reshaping the Attack Surface · May 20, 2026 · 20 min
• Canvas, Trellix, Mini Shai-Hulud: How Defenders Respond When Supply Chain Attacks Become Weekly · May 14, 2026 · 32 min
• Akira, ShinyHunters, and The Gentlemen: Extortion Lessons From Early 2026 · May 6, 2026 · 35 min