Product
8 Interestana reports mention ScreenConnect, newest first. Each is summarised from the original reporting and links back to its publisher.
Microsoft has issued a warning regarding sophisticated phishing campaigns that are exploiting the legitimate MSP360 Remote Monitoring and Management (RMM) software. Attackers are distributing an installer for MSP360 under deceptive pretenses, masquerading it as meeting invitations, PDF-themed lures, or software…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has officially added five previously undisclosed security vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog. This action signifies that these flaws are currently being actively exploited by malicious actors in real-world attacks…
Cybersecurity researchers have detailed a worm-like campaign that exploits ConnectWise ScreenConnect to distribute a malicious Visual Basic Script (VBScript) payload to newly connected systems. Huntress, a cybersecurity firm, reported that three distinct incidents have been observed, each employing different initial…
ConnectWise has alerted users to a newly identified vulnerability affecting its ScreenConnect remote access software, with a patch anticipated later this week. The company has provided interim mitigation strategies to help customers protect their systems until the permanent fix is…
Phishing actors are actively exploiting the legitimate Faronics Deploy endpoint-management platform to achieve remote administrative control over victim computers. This abuse allows attackers to install the ScreenConnect remote support software, a tool commonly used for legitimate remote access but also…
A sophisticated phishing campaign is actively exploiting recent security concerns surrounding the COLDCARD hardware cryptocurrency wallet, specifically targeting users who are already anxious about a disclosed vulnerability and a suspected $88.6 million Bitcoin theft.
Cybersecurity researchers have identified a sophisticated phishing campaign, dubbed Operation BlueDash, that exploits a fake Microsoft Teams update to deploy legitimate Remote Monitoring and Management (RMM) tools. The campaign was detailed by the cybersecurity firm ZeroBEC, which observed threat actors…
Unknown threat actors are leveraging the ScreenConnect remote access tool to deploy and execute AsyncRAT. Kaspersky reported this activity is part of a "massive, multi-domain, multi-language" campaign that distributes malicious installer archives hosted on spoofed websites.