Rogue ScreenConnect Installations Across Unrelated Hosts Suggest Worm-Like Activity
Imported from official source
Huntress is tracking a pattern across multiple customer environments where rogue ScreenConnect clients repeatedly spawn the Windows Script Host to execute a series of four VBScript files.
This version
- Version
- 1 of 3
- Recorded
- September 20, 2026 19:52
- Change
- Initial
- Content hash
5fe094f13dc492f8b7b8c660cd7e729a- All versions
- Revision history