Malware
ScreenConnect Abuse
First seen: 2019-01 • Status: active
Currently Active Threat
ScreenConnect is real IT support software that hackers abuse. Once installed, they can control your computer remotely.
Overview
ScreenConnect/ConnectWise Control is legitimate RMM software abused by threat actors for persistent remote access.
Also Known As
ConnectWise Control Abuse
How It Spreads
- • Social engineering
- • Tech support scams
- • Post-compromise installation
What It Does
- • Remote access
- • Persistent control
Is your business exposed?
Target Platforms
Windows, macOS
Detection Tips
- • Monitor for unauthorized RMM tools
MITRE ATT&CK Techniques
T1219
If You're Infected
- 1.
Audit RMM tool installations
Related Malware
Is your business exposed?
Check if your company data is circulating on the dark web
Free scan • No credit card required