SECURITYJul 1 · 17:53 UTCTHE HACKER NEWS[email protected] (The Hacker News)

SEO-Poisoned Software Sites Abuse ScreenConnect to Deploy AsyncRAT

Unknown threat actors are using the ScreenConnect remote access tool to deploy AsyncRAT via spoofed websites. Kaspersky reports a 'massive, multi-domain, multi-language' campaign distributing malicious installers disguised as popular software like OBS Studio and Bandicam.

Nexus surfaces and summarizes. The full story lives at the source.

Mentioned

KasperskyorganizationScreenConnecttopicAsyncRATtopicOBS StudiotopicDNS JumpertopicDS4WindowstopicBandicamtopic

Spot something wrong with this article?Report a problem →

Forward this

Related Signal

Adjacent reporting

SECURITYApr 14 · 10:20 UTC
Mirax Android RAT Turns Devices into SOCKS5 Proxies, Reaching 220,000 via Meta Ads
SECURITYApr 24 · 09:29 UTC
Tropic Trooper Uses Trojanized SumatraPDF and GitHub to Deploy AdaptixC2
SECURITYApr 22 · 14:48 UTC
DPRK Fake Job Scams Self-Propagate in 'Contagious Interview'
SECURITYJun 23 · 05:38 UTC
WhatsApp VBScript Campaign Uses Fake Documents to Install ManageEngine RMM Tool
SECURITYApr 30 · 11:30 UTC
EtherRAT Distribution Spoofing Administrative Tools via GitHub Facades
SECURITYMay 20 · 23:00 UTC
Shai-Hulud: What to Know About the Malware Spreading Through Software Pipelines