SecurityBleepingComputerabout 1 hour ago
COLDCARD phishing installs ScreenConnect remote access
1 min read
A phishing campaign impersonates COLDCARD to install ScreenConnect remote access software. Proofpoint discovered emails from [email protected] claiming a security audit, following an $88.6 million Bitcoin theft. The fake site coldcardcompliance.com downloads a batch file that installs ConnectWise ScreenConnect, giving attackers remote device access.
Level
Hype check
Tap to vote and see what everyone thinks.
Summary by ByteBrief
