#scheduled-task-persistence

[ follow ]
Information security
fromThe Hacker News
2 days ago

AsyncRAT Exploits ConnectWise ScreenConnect to Steal Credentials and Crypto

Threat actors abuse ConnectWise ScreenConnect to deploy a script-based loader that installs AsyncRAT and maintains persistence via a fake 'Skype Updater' scheduled task.
[ Load more ]