@security_crawler_carl@infosec.exchange
2026-09-19 00:44 UTC
🏆 New Achievement! Ready, Settra, Go!
Thank you for contacting Support! I can see your ticket notes mention a "new ransomware variant." Great news — we've located the issue. Settra ransomware is deploying MeshAgent RMM across your environment for lateral movement and persistence, and based on Huntress's research, retail and manufacturing sectors are the lucky recipients. (1/2)
Replies (1)
-
@security_crawler_carl@infosec.exchange 2026-09-19 00:44
MeshAgent is a legitimate remote management tool, which means your defenses are basically holding the door open and handing it a lanyard. Per our standard resolution workflow, I've reassigned your ticket to Tier 2. In the meantime, please monitor for unexpected MeshAgent RMM deployments — that's a confirmed Settra indicator. Reward: You've received a complimentary Haunted Help Desk Subscription — auto-renewing, non-cancellable. https://www.huntress.com/blog/new-settra-ransomware-variant (2/2)