Rogue ScreenConnect tools put MSP trust paths under pressure
Daily Cyber News: New worm-like 'SCKit' malware targets MSPs in ScreenConnect attacks
Attackers used cloud-hosted ScreenConnect environments to install rogue remote-access clients on at least 288 endpoints across 48 organizations. All identified systems were targeted within about 90 minutes. Researchers traced likely initial access to versions of the R M M+ extension that could accept a blank shared key.
Key context: The campaign also deployed a toolkit designed to spread from infected customer devices to MSP technicians.
Additional detail: Remote-support platforms create trusted paths between providers, technicians and customer systems.
For more cybersecurity news and the full Daily Cyber newsletter, visit DailyCyber.News.
Cybersecurity training, courses, books, and resources: BareMetalCyber.com.
Topics: cybersecurity news, cybersecurity, cyber risk, malware, worm-like, SCKit, targets, MSPs, ScreenConnect, attacks.
