SEO-Poisoned Software Sites Abuse ScreenConnect to Deploy AsyncRAT

Unknown threat actors are leveraging the ScreenConnect remote access tool as a way to deploy and execute AsyncRAT.

Kaspersky said the activity is part of a “massive, multi-domain, multi-language” campaign that distributes malicious installer archives hosted on spoofed websites.

These installers masquerade as popular software like OBS Studio, DNS Jumper, DS4Windows, and Bandicam, among others.

Source: The Hacker News

Tags:

Leave a Reply

Your email address will not be published. Required fields are marked *

Explore More

Wazuh and AI For Enhanced SOC Workflows

Wazuh and AI For Enhanced SOC Workflows Artificial Intelligence (AI) has become one of this decade’s defining technologies. From healthcare and finance to manufacturing and education, organizations increasingly rely on

Read More

Attack Update: Top 5 Attack-IPs auf doode.info – 21.06.2026

Watchtower Attack Update. Hier die aktuellen Top 5 Attack-IPs, die auf doode.info klopfen. 89.167.35.212 — 69 requests (recent log) 216.73.217.60 — 25 requests (recent log) 93.158.213.25 — 18 requests (recent

Read More

Noam Shazeer Joins OpenAI

Noam Shazeer Joins OpenAI Source: Hacker News

Read More