Modified ScreenConnect Clients Used in Worm-Like Campaign

September 7, 2026 · 11:45 am 2 sources

Image: SecurityWeek

Coverage

Coverage

• Modified ScreenConnect Clients Used in Worm-Like Campaign
  SecurityWeek · September 7, 2026 11:45
  The attacks rely on backdoored ScreenConnect instances to transfer and execute payloads to newly connected clients. The post Modified ScreenConnect Clients Used in Worm-Like Campaign appeared first on SecurityWeek .

More coverage

• Rogue ScreenConnect Clients Spread Four-Stage VBScript Chain to Newly Connected Hosts
  The Hacker News · September 7, 2026 11:36
  Cybersecurity researchers have disclosed details of worm-like activity that abuses ConnectWise ScreenConnect to distribute a malicious Visual Basic Script (VBScript) payload to newly connected systems. According to Huntress, three unrelated incidents have been found to use diverse initial access…