The thing that strikes me most about the current public conversation on agent reliability is that it treats agents as one category. They are not.
SMOKE#SCREEN uses fake Adobe and Zoom updates, document lures, and trusted cloud services to install ScreenConnect for persistent remote access.