ScreenConnect

Reported Context (6)

Fortinet SSL-VPN, N-able N-central or other RMM consoles, commercial RMM agents (MeshAgent, Atera, ScreenConnect, Splashtop, NinjaRMM, SimpleHelp), Windows endpoints without vulnerable-driver blocking, or Azure Ransomware Disclosures Fell to 862 in September as Affiliates Continued Evolving Their Tactics
Threat actors abuse legitimate remote-access software such as LogMeIn, UltraViewer, ScreenConnect, RustDesk, AnyDesk, and TeamViewer. Tech Support Scam Campaign Sent 13 Million Emails to Japanese Addresses
Strike, AnyDesk, ScreenConnect, and TeamViewer were used by INC ransomware Acronis Details INC Ransomware’s Growth, Tactics and Cross-Platform Payloads
Installs and abuses Remote Management Tools (RMM) including ScreenConnect and AnyDesk via Atera agents to execute discovery commands and blend activity with legitimate administrative operations. Qilin Ransomware Group Expands Cross-Platform Operations and Extortion Tactics
The link leads to an installer for PDQ Connect, MeshAgent, ScreenConnect, or Syncro RMM. Phantom Enigma Uses Browser Manipulation to Install Credential-Stealing Extensions

CVE (10)

Malware (17)

People (11)

Threat Actors (44)

MITRE ATT&CK (52)

Vendors (14)

Products (40)

Tools (46)

Industries (22)

Countries (13)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.