Rogue ScreenConnect Installations Across Unrelated Hosts Suggest Worm-Like Activity
Imported from official source
Huntress is tracking a pattern across multiple customer environments where rogue ScreenConnect clients repeatedly spawn the Windows Script Host to execute a series of four VBScript files.
This version
- Version
- 3 of 3
- Recorded
- September 23, 2026 14:00
- Change
- Imported change
- Content hash
5fe094f13dc492f8b7b8c660cd7e729a- All versions
- Revision history