Hackers Weaponize ScreenConnect to Spread Worm-Like Malware Across Windows Systems

Hackers Weaponize ScreenConnect to Spread Worm-Like Malware Across Windows Systems

Hackers are turning rogue remote-support installations into a tool that can spread malicious code between Windows computers. The activity stands out because an infected remote-access client can pass staged payloads to connected systems, widening an intrusion without a lure for every victim. The campaign began with social engineering, including fake technical-support interactions, phishing, and a […]

Rogue ScreenConnect Clients Spread Worm-Like Malware Across Connected Windows Systems

A malicious ScreenConnect campaign in which rogue remote-access clients do more than provide attackers with hands-on control: modified clients can… Read more →

Hijacked ScreenConnect Installs Are Spreading Malware Like a Worm, Huntress Warns

Cybersecurity firm Huntress has uncovered a wave of malicious installations of ScreenConnect, a widely used remote-support tool, that spread between machines without any further action from a victim or an attacker, a self-propagating attack chain researchers likened to a computer worm. In a blog post published this week, Huntress said its Security Operations Center (SOC) had flagged the same unusual pattern of activity across several unrelated c…