ThreatVectr
Tag

#ScreenConnect

9 stories taggedScreenConnect.

Illustration: a generic laptop screen at night showing a plain calendar meeting invitation with a paperclip attachment icon
Threat Intelligence

Fake Meeting Invites Are Now Delivering Real Remote-Control Software

Microsoft says attackers are skipping the malware and installing legitimate MSP360 and ScreenConnect on victim machines, giving themselves a hands-on-keyboard foothold that looks like normal IT admin work.

4 min read
A corporate network diagram projected on a screen with IT technician at desk, remote support software interface visible, malware infection paths shown spreading
Threat Intelligence

Hackers Are Hijacking Remote-Support Software to Spread Malware Across Whole Networks

A modified version of the popular IT tool ScreenConnect is being used in a self-spreading attack that starts with a fake tech-support call and ends with criminals inside your entire network.

3 min read
An IT support center with multiple workstations running remote support software, ScreenConnect interface visible on screens, file transfer dialogs open, warning
Vulnerabilities

ConnectWise ScreenConnect Hit by New File-Transfer Flaw, Patch Days Away

The remote-support tool used by IT teams worldwide has a bug that lets attackers move files through active sessions. A fix is expected this week.

3 min read
A global map projection showing phishing attack origins and target locations as glowing lines and nodes, with North American targets highlighted in bright red,
Threat Intelligence

US Now Top Target in Global Phishing Campaign That Hijacks Remote Access Tools

A phishing operation first spotted using fake Canadian tax notices has spread to 46 countries, with nearly half of all sightings hitting American inboxes.

3 min read
Multiple computer workstations in a network showing real-time system monitoring dashboards, with one screen displaying Adobe file icons being deployed across co
Threat Intelligence

Phishing crews hijacked a legitimate IT tool to take over more than 450 computers

Attackers pushed fake Adobe files that quietly enrolled victim PCs into Faronics Deploy, then used it to install ScreenConnect for hands-on remote control.

3 min read
An email inbox showing a phishing message with COLDCARD hardware wallet branding, an installation dialog in the background, and subtle indicators of the ScreenC
Threat Intelligence

Fake COLDCARD 'Security Audit' Emails Push Remote Access Tool After $88M Bitcoin Theft

A phishing campaign impersonates the hardware wallet maker, tricks owners into installing ScreenConnect, and hands attackers full control of the victim's PC.

4 min read
A corporate employee desktop with ScreenConnect remote-access tool running in the background while antivirus software shows a clean status, attacker command pro
Threat Intelligence

Hackers Are Using a Legitimate Remote-Access Tool to Spy on Companies, and Your Antivirus Won't Notice

The Smoke#Screen campaign tricks employees into installing ScreenConnect, a genuine remote-support program, which then hands criminals full control of the victim's computer while looking completely normal to security software.

4 min read
A desktop computer screen showing a fake Microsoft Teams update notification window overlaid on top of legitimate system windows, with a bogus progress bar load
Threat Intelligence

Fake Microsoft Teams Update Pushes Remote-Control Tools onto Victims' PCs

A phishing run tracked as Operation BlueDash uses a bogus 'secure document' lure and a counterfeit Microsoft Store page to install legitimate remote-access software on target machines.

4 min read
Illustration: a laptop on a dark wooden desk with a generic software installer progress bar glowing on screen
Threat Intelligence

ScreenConnect Turned Loader: Trojanized Installers Push AsyncRAT via Spoofed Software Sites

A sprawling campaign is abusing a signed RMM binary to sideload AsyncRAT onto victims chasing free copies of OBS Studio, Bandicam, and other utilities, Kaspersky says.

3 min read
© 2026 Threat Vectr