Rogue ScreenConnect clients breach 47 orgs via MSP panels
Huntress is tracking a worm-like campaign abusing ScreenConnect's Run Command feature to push rogue clients across MSPs — 6 providers, 286+ endpoints so far, and no CVE involved.
Huntress is tracking a worm-like campaign abusing ScreenConnect's Run Command feature to push rogue clients across MSPs — 6 providers, 286+ endpoints so far, and no CVE involved.