Operation BlueDash Deploys Level RMM and ScreenConnect via Fake Teams Update

Operation BlueDash uses fake Microsoft Teams update lures to trick users into downloading legitimate RMM tools (Level and ScreenConnect), establishing remote access for potential credential harvesting or system compromise. This phishing campaign targets Teams users via compromised infrastructure and counterfeit Store pages.

https://thehackernews.com/2026/07/operation-bluedash-deploys-level-rmm.html