Huntress uncovers SCKit: rogue ScreenConnect toolkit hits 288 hosts in 90 minutes

Huntress researchers have detailed a fast-moving campaign in which attackers abused cloud-hosted ScreenConnect panels to install rogue clients and a custom toolkit, dubbed SCKit, on managed endpoints. At least 288 hosts across 48 Huntress-protected organisations were affected within around 90 minutes on 11 November, with roughly a third compromised in the first ten minutes. Rather […]

This article has been indexed from IT Security Guru