SEO-Poisoned Software Sites Abuse ScreenConnect to Deploy AsyncRAT

Unknown threat actors are leveraging the ScreenConnect remote access tool as a way to deploy and execute AsyncRAT.

Kaspersky said the activity is part of a “massive, multi-domain, multi-language” campaign that distributes malicious installer archives hosted on spoofed websites.

These installers masquerade as popular software like OBS Studio, DNS Jumper, DS4Windows, and Bandicam, among others.

Source: The Hacker News

Tags:

Leave a Reply

Your email address will not be published. Required fields are marked *

Explore More

Show HN: Nightcrawler – A local AI pentesting agent running on a smartphone

Show HN: Nightcrawler – A local AI pentesting agent running on a smartphone Source: Hacker News

Read More

Attack Update: Top 5 Attack-IPs auf doode.info – 16.08.2026

Watchtower Attack Update. Hier die aktuellen Top 5 Attack-IPs, die auf doode.info klopfen. Keine relevanten IPs erfasst (ruhig oder stark gefiltert). Mehr Live-Daten und die komplette Historie im /attacks/ Watchtower-Bereich

Read More

Show HN: Brolly, a plain-text weather forecast site

Show HN: Brolly, a plain-text weather forecast site Source: Hacker News

Read More