---
title: "#rmm-abuse articles | Hashnode"
description: "Explore 2 articles tagged #rmm-abuse on Hashnode. Tutorials, guides, and how-tos from the community."
url: "https://hashnode.com/tag/rmm-abuse"
---

Tag

# #rmm-abuse

2 posts · 0 followers

[Vũ Nhật Lâm](https://hashnode.com/@kami61) · [Sep 29](https://hashnode.com/posts/settra-ransomware-meshagent-rmm/6abb338a254bad2847d79b69)

### [Settra: When Ransomware Uses Your Remote Management Tooling to Stay](https://blog.fiscybersec.com/settra-ransomware-meshagent-rmm?utm_source=hashnode&utm_medium=feed)

Summary Settra is a ransomware strain first observed in June 2026, operating a double-extortion model. Huntress states there is not enough evidence to call it a ransomware-as-a-service operation. What

7 min read · [blog.fiscybersec.com](https://blog.fiscybersec.com/settra-ransomware-meshagent-rmm?utm_source=hashnode&utm_medium=feed)

[Vũ Nhật Lâm](https://hashnode.com/@kami61) · [Aug 20](https://hashnode.com/posts/operation-bluedash-multi-rmm-abuse-en/6a86c6167912ba745623040c)

### [Operation BlueDash: When Legitimate RMM Becomes the Backdoor, and a Public GitHub Repo Tells the Whole Story](https://blog.fiscybersec.com/operation-bluedash-multi-rmm-abuse-en?utm_source=hashnode&utm_medium=feed)

Summary There is no malware in this campaign. The final payload the victim receives is the official Level RMM installer, downloaded directly from Level's own infrastructure, installed via msiexec with

23 min read · [blog.fiscybersec.com](https://blog.fiscybersec.com/operation-bluedash-multi-rmm-abuse-en?utm_source=hashnode&utm_medium=feed)