Rogue remote-access campaign spread through ScreenConnect add-on, researchers say

CyberScoopNovember 12, 2026Threat Intel

ConnectWise disabled five third-party extensions across about 400 partner environments after researchers linked a worm-like toolkit to one of them. The post Rogue remote-access campaign spread through ScreenConnect add-on, researchers say appeared first on CyberScoop .

Summary from CyberScoop.

Read the full article at CyberScoop

Rogue remote-access campaign spread through ScreenConnect add-on, researchers say

More in Threat Intel

ThreatsDay: 59 Linux Kernel Bugs, Falcon Spyware, GSocket Backdoors + 17 More Stories

International operation dismantles malware networks, exposes 6.4 million stolen credentials

European authorities take down SteaIC malware servers for second time this year

ConnectWise investigates ScreenConnect breaches after reports of incidents at nearly 50 organizations

New Windows SignDrop zero-day gives hackers SYSTEM privileges