THREATOPS
THREAT OPS › Threat News › Impersonating IT support: how threat actors turn a remote session into enterprise-wide access

Impersonating IT support: how threat actors turn a remote session into enterprise-wide access

medmssticPublished 2026-09-02

<aside class="table-of-contents-block accordion wp-block-bloginabox-theme-table-of-contents" id="accordion-f2d9dbb7-ffe1-455a-a658-1b62a7e603bb"> <button class="btn btn-collapse" type="button"> <span class="table-of-contents-block__label">In this article</span> <span class="table-of-contents-block__current"></span>

<svg class="table-of-contents-block__arrow" fill="none" height="11" viewBox

MITRE ATT&CK techniques

Indicators of compromise

Original source: https://www.microsoft.com/en-us/security/blog/2026/09/02/impersonating-it-support-threat-actors-turn-remote-session-into-enterprise-wide-access/