A worm-like toolkit called SCKit has compromised at least 288 managed endpoints across 48 organizations through abused ConnectWise ScreenConnect panels. Huntress researchers say the operator pushed rogue clients through cloud-hosted panels, giving the attacker persistent remote access and a trap for stealing technician session cookies. The affected builds include the latest releases, 26.6.6.9747 and 26.7.6.9783. […]
Read the original article:
New SCKit Worm Targets ConnectWise ScreenConnect, Infecting 288 Endpoints Across 48 Organizations
