ScienceThe Hacker Newsabout 3 hours ago
Fake Adobe, Zoom Updates Deploy ScreenConnect
1 min read
A multi-wave campaign codenamed SMOKE#SCREEN uses fake Adobe and Zoom updates to install ConnectWise ScreenConnect for persistent remote access. Securonix found VBScript droppers,.NET executables, and an HTML phishing page pointing to a WsgiDAV staging server. Attacks end with ScreenConnect beaconing to attacker-controlled relay servers.
Level
Hype check
Tap to vote and see what everyone thinks.
In this storyAdobe
Summary by ByteBrief
