The Huntress Tragic Quadrant: Beat the Hype on Cyber Tactics Wrecking Businesses
Huntress, Thursday, October 1st, 2026
Huntress ranks attacker tactics by prevalence and proximity to business disruption, topped by RMM abuse, BEC and AiTM takeover.
Huntress created the Tragic Quadrant, aimed at small and mid-sized organizations, to rank cyber tactics by how common they are across its telemetry and how close they bring organizations to major business disruption.
The highest-risk corner includes remote monitoring and management (RMM) tool abuse, mailbox manipulation leading to business email compromise and adversary-in-the-middle account takeover that bypasses MFA.
Emerging tactics such as device code phishing, ClickFix and AI platform abuse sit elsewhere but are evolving quickly.