Fake Adobe Reader Download Delivers ScreenConnect Through Stealthy In-Memory Loader

A newly uncovered attack campaign is tricking users into installing remote access software on their systems by disguising malware as a legitimate Adobe Acrobat Reader download. The attack uses a sophisticated chain of techniques — including in-memory execution, process masquerading, and privilege escalation — to deploy ConnectWise’s ScreenConnect without leaving obvious traces on the victim’s […]

The post Fake Adobe Reader Download Delivers ScreenConnect Through Stealthy In-Memory Loader appeared first on Cyber Security News.