Submission + - HP: Hackers Are Turning Legitimate Remote Access Tools Into Backdoors (nerds.xyz)
BrianFagioli writes: HP is warning that hackers are increasingly abusing legitimate remote access tools such as LogMeIn and ScreenConnect instead of relying solely on traditional malware. According to the companyâ(TM)s latest Wolf Security Threat Insights Report, attackers have used tax-themed phishing emails, fake software updates, and bogus app downloads to trick users into installing authentic remote access software that ultimately gives cybercriminals persistent control over their PCs. Because the software is legitimate and digitally signed, the activity can blend in with normal IT operations and avoid raising suspicion.
The report also highlights a growing number of attacks involving fake cryptocurrency wallet recovery tools, AI-assisted âoevibe-codedâ malware, and ClickFix campaigns that disguise malware as audio files behind realistic CAPTCHA prompts. HP says email remains the top malware delivery method, accounting for 57 percent of threats observed during the first quarter of 2026. The company argues that modern attackers are increasingly hiding behind trusted software, familiar workflows, and convincing social engineering rather than obviously malicious programs. What do you think about attackers abusing legitimate tools instead of creating their own malware? Is user education enough, or do operating systems need stronger protections against this sort of abuse?
The report also highlights a growing number of attacks involving fake cryptocurrency wallet recovery tools, AI-assisted âoevibe-codedâ malware, and ClickFix campaigns that disguise malware as audio files behind realistic CAPTCHA prompts. HP says email remains the top malware delivery method, accounting for 57 percent of threats observed during the first quarter of 2026. The company argues that modern attackers are increasingly hiding behind trusted software, familiar workflows, and convincing social engineering rather than obviously malicious programs. What do you think about attackers abusing legitimate tools instead of creating their own malware? Is user education enough, or do operating systems need stronger protections against this sort of abuse?
