Hackers Target ScreenConnect Features For Network Intrusions

Hackers Target ScreenConnect Features For Network Intrusions

A rise in cyber-attacks exploiting remote monitoring and management (RMM) tools for initial access via phishing has been observed by cybersecurity researchers.

According to the new findings from the DarkAtlas research project, advanced persistent threat (APT) groups are abusing popular RMM platforms, including AnyDesk, ConnectWise ScreenConnect and Atera, to gain unauthorized control of systems.

While AnyDesk has become easier to detect, leading many attackers to move away from it, ScreenConnect has recently gained traction among adversaries.

ScreenConnect is designed to let IT administrators deploy tasks, manage devices and provide remote support across multiple operating systems, including Windows, macOS, Linux, iOS and Android.

Developed by ConnectWise, ScreenConnect's features are being exploited by hackers for network intrusions.

Author's summary: Hackers exploit RMM tools for network intrusions.

more

Infosecurity Magazine Infosecurity Magazine — 2025-10-13

More News