MOREnet TMS Service Notice - Blocking External Remote Access Tools Due to Phishing Campaign

Scheduled Maintenance Report for MOREnet Service

In progress

Scheduled maintenance is currently in progress. We will provide updates as necessary.
Posted Aug 31, 2026 - 15:00 CDT

Scheduled

Dear Members,

We are writing to alert you to a recent phishing campaign that has been targeting our members and, in several cases, has attempted to exploit remote access tools to gain unauthorized access to systems.

As a precaution, we are recommending that all members block remote access tools at the firewall level. **The full list of applications we will be blocking is below** — 114 in total, including well-known tools such as TeamViewer, AnyDesk, LogMeIn, GoToMyPC, Splashtop, ScreenConnect, Chrome Remote Desktop, and VNC, along with a number of less common remote access utilities and protocols.

As of this evening Monday Aug 31st we will implement a wildcard block of ScreenConnect software. In the next few days we will be implementing a new application profile to block any of the remote access tools in this list below.

**What we need from you:**

If you are currently using any of the applications on the list below for legitimate business purposes, you must let us know by **Wednesday, September 2nd, 2026**. Please email us at security@more.net with the name of the application(s) you use and a brief description of their business purpose.

**Important:** If you are using one of these applications and do not notify us by the deadline, it will be blocked along with the rest. Please respond promptly to avoid any disruption to your work.

We understand this is a short turnaround, but given the active nature of this phishing campaign, we felt it was important to act quickly to protect our members' systems and data.

If you have any questions, please don't hesitate to reach out to us at security@more.net.

Thank you for your prompt attention to this matter and for helping us keep our members secure.

Sincerely,

MOREnet
Security Team

List of applications.
Action1 | Adobe.Connect_Meeting.Remote.Control | AeroAdmin | AirDroid | Alpemix | Amazon.AWS_Workspaces.Health.Status | Ammyy.Admin | AnyDesk | Anyplace.Control | Apple.Remote.Desktop | AweSun | Back.Orifice | Bomgar | Chrome.Remote.Desktop | Citrix.Receiver | Citrix.Services_Netviewer | ConnectWise.Automate | ConnectWise.Automate_Remote.Control | DWService | DameWare | Dell.iDRAC | DeskShare | Edovia.Screens.Connect | Ericom.AccessNow | FastViewer | FixMe.IT | FleetDeck | GDB.Remote | GoToAssist | GoToMyPC | GoToResolve | Goverlan | Guacamole | HP.ZCentral.Remote.Boost | HPE.iLO | Honeywell.TotalConnect | HopToDesk | ISL.Light | Iperius.Remote | JSP.File.Browser | Jump.Desktop | Level.RMM | LiveCare | LogMeIn | LogMeIn_Rescue | MS.Netlogon | MSP360.Remote.Assistant | Microsoft.Configuration.Manager | Microsoft.Hyper-V.VMConnect | Microsoft.Quick.Assist | Microsoft.Service.Controller | MikroTik.Winbox | MoboRobo | Mocha.RDP | Mosh | N-able.N-sight.RMM | N-central | NTR.Cloud | NetSupport.Manager | Netop.On.Demand | Netop.Remote.Control | Nezha.Monitoring | NinjaOne | NoMachine | Parsec | PhoneMyPc | PsExec | Pulseway | QQ_Remote.Control | RDP | RDP.over.HTTPS | Radmin | Remote.Manipulator.System | RemotePC | RemotelyAnywhere | Remotix | Rexec | Rlogin | Rsh | Rsupport.RemoteCall | Rsupport.RemoteView | RustDesk | ScreenConnect | ShowMyPC | SimpleHelp | Solarwinds.Take.Control | Splashtop | Spy.Agent | Sunlogin | Supremo | Synergy | TeamViewer | TeamViewer_CallReceive | TeamViewer_CallRequest | Telnet | Tesla.CarApp | ToDesk | UltraViewer | VNC | VNC.Encrypted | VNC_Clipboard | VNC_File.Download | VNC_File.Upload | WMI.DCERPC | WMI.DCERPC_Execute.Method.Request | WMI.DCERPC_Execute.Method.Request.StdRegProv.Class | WMI.DCERPC_Execute.Method.Request.Win32.Process.Class | Windows.Powershell | Windows.Remote.Management | Zoho_Assist | Zoom_Meeting.Remote.Control | ezHelp | ezRemote | pcvisit
Posted Aug 31, 2026 - 14:36 CDT
This scheduled maintenance affects: Managed Services (Threat Management Solution - K12, Threat Management Solution - Libraries, Threat Management Solution - Affiliates).