TechThe Hacker Newsabout 2 hours ago
SEO-Poisoned Software Sites Abuse ScreenConnect to Deploy AsyncRAT
1 min read
Threat actors are using ScreenConnect to deploy AsyncRAT via spoofed software sites. Kaspersky identified over 90 domains in 10 languages hosting malicious installers masquerading as OBS Studio, DNS Jumper, DS4Windows, and Bandicam. The attack uses DLL side-loading to install ScreenConnect, which then executes PowerShell scripts to disable defenses and run AsyncRAT via process hollowing.
Level
Hype check
Tap to vote and see what everyone thinks.
