A multi-stage phishing campaign targeting 900+ organizations is deceiving employees with convincing fake invitations from platforms like Zoom and Microsoft Teams.
Instead of stealing credentials, these attacks trick targets into installing ConnectWise ScreenConnect, a legitimate remote monitoring and management (RMM) tool that gives threat actors full device control while blending seamlessly with sanctioned IT activity. Driving this surge is a thriving dark web marketplace, where ScreenConnect packages are sold with stealth features, persistence tactics, and even customer-style support.
Our threat intelligence report, Weaponizing Workplace Communications: How Videoconferencing Impersonation and AI Exploitation Enable Malicious ScreenConnect Deployment, reveals how attackers exploit trusted workflows and AI-generated phishing lures, how the underground economy accelerates abuse, and what security leaders must do to defend against this threat.
Download the Threat Intelligence Report to:
Understand why the abuse of legitimate remote monitoring tools makes detection difficult.
See the sophisticated obfuscation techniques that bypass traditional security controls.
Discover the dark web ecosystem enabling widespread ScreenConnect weaponization.
Learn the multi-layered defense strategies needed to protect against modern social engineering attacks.
Fill out the form to get your copy today.
Earn ISC2 CPE (1 credit)
This resource is ISC2 CPE eligible. Submit the credit form to claim your continuing-education credits.
