---
title: "#living-off-trusted-software articles | Hashnode"
description: "Explore 2 articles tagged #living-off-trusted-software on Hashnode. Tutorials, guides, and how-tos from the community."
url: "https://hashnode.com/tag/living-off-trusted-software"
---

Tag

# #living-off-trusted-software

2 posts · 0 followers

[Vũ Nhật Lâm](https://hashnode.com/@kami61) · [Aug 20](https://hashnode.com/posts/operation-bluedash-multi-rmm-abuse-en/6a86c6167912ba745623040c)

### [Operation BlueDash: When Legitimate RMM Becomes the Backdoor, and a Public GitHub Repo Tells the Whole Story](https://blog.fiscybersec.com/operation-bluedash-multi-rmm-abuse-en?utm_source=hashnode&utm_medium=feed)

Summary There is no malware in this campaign. The final payload the victim receives is the official Level RMM installer, downloaded directly from Level's own infrastructure, installed via msiexec with

23 min read · [blog.fiscybersec.com](https://blog.fiscybersec.com/operation-bluedash-multi-rmm-abuse-en?utm_source=hashnode&utm_medium=feed)

[Vũ Nhật Lâm](https://hashnode.com/@kami61) · [Aug 6](https://hashnode.com/posts/russian-apt-ecosystem-2023-2026-en/6a7440636ff197cb9c69f304)

### [A consolidated analysis of five Russian actor clusters across a fake Notepad++ plugin chain, cloud-service dead drops](https://blog.fiscybersec.com/russian-apt-ecosystem-2023-2026-en?utm_source=hashnode&utm_medium=feed)

Summary Six publications from CERT-UA, ESET, Unit 42, Proofpoint and StrikeReady, spanning 2023 to July 2026, describe five separate Russian actor clusters. Read together, they reveal a shared pattern

27 min read · [blog.fiscybersec.com](https://blog.fiscybersec.com/russian-apt-ecosystem-2023-2026-en?utm_source=hashnode&utm_medium=feed)