Domotz

Reported Context (2)

indicating active internal reconnaissance. The presence of `domotz_nmap.exe` suggests abuse of the Domotz network monitoring platform as cover for scanning activity. Guardz MSP Threat Report Finds Rising Session Hijacking and RMM Abuse
targets for password theft and lateral movement within networks. Meanwhile, rogue installations of Ninja, Domotz, Auvik, Naverisk, and Kaseya VSA have also been reported as tools abused by attackers looking to cement Huntress Highlights RMM Abuse, BYOVD and WebDAV as Key 2024 Threats

CVE (2)

Malware (4)

People (3)

Threat Actors (7)

MITRE ATT&CK (15)

Vendors (3)

Products (18)

Tools (9)

Industries (1)

Countries (1)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.