SEO-Poisoned Software Sites Abuse ScreenConnect to Deploy AsyncRAT
Unknown threat actors are leveraging the ScreenConnect remote access tool as a way to deploy and execute AsyncRAT.
Kaspersky said the activity is part of a “massive, multi-domain, multi-language” campaign that distributes malicious installer archives hosted on spoofed websites.
These installers masquerade as popular software like OBS Studio, DNS Jumper, DS4Windows, and Bandicam, among others.
Source: The Hacker News
Watchtower Attack Update. Hier die aktuellen Top 5 Attack-IPs, die auf doode.info klopfen. 89.167.35.212 — 1 requests (recent log) Mehr Live-Daten und die komplette Historie im /attacks/ Watchtower-Bereich (GoAccess Report
Watchtower Attack Update. Hier die aktuellen Top 5 Attack-IPs, die auf doode.info klopfen. 89.167.35.212 — 849 requests (recent log) 216.244.66.232 — 192 requests (recent log) 64.227.190.95 — 176 requests (recent
Watchtower Attack Update. Hier die aktuellen Top 5 Attack-IPs, die auf doode.info klopfen. 34.165.212.4 — 614 requests (recent log) 34.14.188.93 — 614 requests (recent log) 89.167.35.212 — 320 requests (recent