SimpleHelp

Reported Context (1)

2 (December 2025) involved the leaked version of LockBit3 for an intrusion in which the operator abused SimpleHelp, a legitimate remote monitoring and management (RMM) platform, via infrastructure hosted within AS9009. Team Cymru Details Ransomware Infrastructure Trends Across 20+ Investigations

Malware (2)

Threat Actors (7)

MITRE ATT&CK (8)

Vendors (4)

Products (7)

Tools (5)

Countries (1)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.