Tag: worm campaign

Cybersecurity Threat Advisory: Rogue ScreenConnect and SCKit worm campaign

Threat actors launched a rapid, automated campaign targeting cloud-hosted ConnectWise ScreenConnect instances. The campaign deploys rogue, attacker-controlled ScreenConnect clients alongside a custom, worm-like post-exploitation toolkit dubbed SCKit. ConnectWise published an emergency advisory on November 11. Barracuda’s Security Operations Center (SOC)...