After that TRMM Agent crypto miner injection shit from the original founder of TRMM who was ‘just testing’ the integration of a Monero crypto miner in a supposedly ‘personal’ version of code base that ended up stored on files dot tacticalrmm dot io site, I’ll never, ever, ever go near it. The excuses and bullshit that was spun out of it felt like poorly conceived PR fluff to obfuscate some obviously black hat inspired ideas. Integrating it into the Agent in the first place makes no sense, the RMM agent is what you’d use to script and deploy a miner to the end machines, it makes ZERO rational sense that it would be embedded in the RMM itself.
Read all of the comments and especially keep an eye out for the commenter that shared screenshots of discord messages where /r/msp mods (unfortunately) gave this guy the script to write his statement from after he was fumbling responses: