Threat actors are abusing legitimate remote-management tools, including ConnectWise ScreenConnect and Microsoft Quick Assist, to install persistent backdoors on Windows devices. Huntress researchers identified several incidents in late August involving social-engineering lures, rogue ScreenConnect clients, VBScript payloads, and attempts to weaken endpoint defenses. The campaigns affected unrelated organizations but followed a similar pattern. Victims were […]
The post Hackers Abuse ScreenConnect and Quick Assist to Deploy Persistent Windows Backdoors appeared first on Cyber Security News.