SEO-Poisoned Software Sites Abuse ScreenConnect to Deploy AsyncRAT

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-07-01 17:53 UTC
  • Importiert: 2026-07-08 15:33 UTC
  • Quelle-ID: thn_global
  • uid_hash: e01455883e118cd4e724968e168c55ed52f9cea27936b96f73e6c54f7207c3e6
The Hacker News

Inhalt

Unknown threat actors are leveraging the ScreenConnect remote access tool as a way to deploy and execute AsyncRAT.

Kaspersky said the activity is part of a "massive, multi-domain, multi-language" campaign that distributes malicious installer archives hosted on spoofed websites.

These installers masquerade as popular software like OBS Studio, DNS Jumper, DS4Windows, and Bandicam, among others.

No data

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
The Hacker News

thn_global

 security_news - de https://feeds.feedburner.com/TheHackersNews
Zurueck zur Eintrags-Liste