Industry
Payroll
- First Reported
- Sep 18, 2026
- Latest Reported
- Sep 25, 2026
Reported Context (2)
- An attacker created fake desktop app pages for three major US payroll and HR platforms that do not offer desktop apps, then used them to install ScreenConnect for hidden remote access. Fake Payroll App Installers Deploy ScreenConnect for Hidden Remote Access
- SAP systems are attractive targets because they often sit at the center of critical business operations, including finance, payroll, procurement, manufacturing, and supply chain management. Critical SAP Extended Passport flaw can enable system compromise; patches available
CVE (1)
People (2)
MITRE ATT&CK (10)
Vendors (2)
Products (6)
Tools (4)
Industries (4)
Countries (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.