Hackers Abuse Power BI for Phishing

Security researchers Huntress uncovered a campaign starting September 10 2026 where attackers used Microsoft Power BI dashboards to trick users into downloading ScreenConnect software. The scheme mimics blurred documents to bypass filters, redirecting victims to attacker-controlled sites for automatic downloads. This establishes persistent remote access, potentially enabling ransomware, espionage, or data theft within corporate networks.