---
title: New Attack Technique Exploits Microsoft Management Console Files
description: Threat actors are exploiting a novel attack technique in the wild that leverages specially crafted management saved console (MSC) files to gain full code execution using Microsoft Management Console (MMC) and evade security defenses. Elastic Security Labs has codenamed the approach GrimResource after identifying an artifact (“sccm-updater.msc”) that was uploaded to the VirusTotal malware.
---

[Outsource IT Blog](https://blog.oitc.ca)

# [New Attack Technique Exploits Microsoft Management Console Files](https://blog.oitc.ca/alerts/new-attack-technique-exploits-microsoft-management-console-files)

 Written by [Nathan Zych](https://blog.oitc.ca/author/nathan-zych) | Jun 30, 2024 7:13:59 PM

Threat actors are exploiting a novel attack technique in the wild that leverages specially crafted management saved console (MSC) files to gain full code execution using Microsoft Management Console (MMC) and evade security defenses.

Elastic Security Labs has codenamed the approach GrimResource after identifying an artifact (“sccm-updater.msc”) that was uploaded to the VirusTotal malware

For more details, [visit the full article](https://thehackernews.com/2024/06/new-attack-technique-exploits-microsoft.html)

<https://www.oitc.ca/contact/>

[Click here to contact Outsource IT](https://www.oitc.ca/contact/)

[View full post](https://blog.oitc.ca/alerts/new-attack-technique-exploits-microsoft-management-console-files)

```json
{
  "@context" : "http://schema.org",
  "@type" : "BlogPosting",
  "author" : {
    "@type" : "Person",
    "name" : "Nathan Zych"
  },
  "dateModified" : "2025-07-10T22:12:13.901Z",
  "datePublished" : "2024-06-30T19:13:59Z",
  "headline" : "New Attack Technique Exploits Microsoft Management Console Files",
  "image" : {
    "@type" : "ImageObject",
    "height" : 380,
    "url" : "https://341889482.fs1.hubspotusercontent-na3.net/hubfs/341889482/Imported_Blog_Media/ms-1-2.png",
    "width" : 728
  },
  "mainEntityOfPage" : "https://blog.oitc.ca/alerts/new-attack-technique-exploits-microsoft-management-console-files",
  "publisher" : {
    "@type" : "Organization",
    "logo" : {
      "@type" : "ImageObject",
      "height" : 60,
      "url" : "/hs/hsstatic/content_shared_assets/static-1.4092/img/default-amp-logo.png",
      "width" : 60
    },
    "name" : "Outsource IT Blog"
  }
}
```