THREAT OPS › Threat News › Rogue ScreenConnect Clients Spread Four-Stage VBScript Chain to Newly Connected Hosts
Rogue ScreenConnect Clients Spread Four-Stage VBScript Chain to Newly Connected Hosts
Cybersecurity researchers have disclosed details of worm-like activity that abuses ConnectWise ScreenConnect to distribute a malicious Visual Basic Script (VBScript) payload to newly connected systems.
According to Huntress, three unrelated incidents have been found to use diverse initial access methods, namely a Quick Assist tech-support scam, a phishing-delivered MSI installer, and a fake
MITRE ATT&CK techniques
- Visual BasicT1059.005