China-linked hackers turning popular cybersecurity tool into ransomware launchpad, Microsoft warns

China-linked hackers, believed to be part of the Storm-1175 group, are exploiting a critical vulnerability in N-central, a remote monitoring and management (RMM) tool, to deploy ransomware. This supply-chain attack is leveraging a zero-day vulnerability, allowing attackers to gain full administrative control of N-central servers and subsequently compromise numerous client endpoints managed by MSPs. The campaign is reminiscent of previous attacks on RMM tools, highlighting the significant risk posed by these tools to a wide range of organizations.