AsyncRAT Exploits ConnectWise ScreenConnect to Steal Credentials and Crypto
Threat actors abuse ConnectWise ScreenConnect to deploy a script-based loader that installs AsyncRAT and maintains persistence via a fake 'Skype Updater' scheduled task.
Phishing campaign targets Teams and Zoom with RMM tool
Attackers hijack ConnectWise ScreenConnect via AI-driven phishing that impersonates Zoom/Teams, using cloud obfuscation to gain administrator access and enable lateral movement and credential theft.