Threat Actors Weaponize Tiflux RMMs in Malspam Attacks

Reported 08 May 2026 by otx · Severity: medium

Since late February, there has been an uptick in incidents involving Tiflux, a lesser-known Brazilian commercial remote management tool being weaponized by threat actors. The attack chain begins with phishing emails containing fake document lures that deliver a malicious MSI inst