NewsBleepingComputer
New worm-like 'SCKit' malware targets MSPs in ScreenConnect attacks
Teaser from the source
A new worm-like malware toolkit named SCKit was deployed in the recent ScreenConnect attacks targeting managed service providers (MSPs), designed to spread from infected customer devices to MSP technicians' computers and compromise additional managed networks. [...]
This is the RSS-feed teaser. Read the full article at the original source.
Read at BleepingComputerMore on ScreenConnect
Other advisories
- CriticalCVE-2026-127063ConnectWise ScreenConnect (RMM+ Extension) : Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen
- CriticalCVE-2026-84869ConnectWise ScreenConnect: ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability
- CriticalCVE-2026-84869ConnectWise ScreenConnect: Schwachstelle ermöglicht Codeausführung
- CriticalCVE-2026-84869connectwise screenconnect: unzureichende Rechteverwaltung
- CriticalCVE-2026-84869connectwise screenconnect: unzureichende Rechteverwaltung
- CriticalCVE-2026-84869A condition in the ScreenConnect client may allow files to be transferred and executed through an active remote session without authorization or Host confirm…
- MediumCVE-2026-11596ConnectWise ScreenConnect: unzureichende Prüfung von Mengenangaben
- MediumCVE-2026-11596ConnectWise ScreenConnect: unzureichende Prüfung von Mengenangaben
Other news entries
- SCKit abuses ScreenConnect to deploy remote access and target technician sessionsNewsMicrosoft Threat Intelligence
- ConnectWise ScreenConnect (RMM+ Extension) : Schwachstelle ermöglicht Umgehen von SicherheitsvorkehrungenVulnerabilityBSI CERT-Bund
- SCKit Malware Turns ScreenConnect Support Sessions Into Potential MSP Attack PathsNewsThe Hacker News
- Hackers exploiting ScreenConnect plugin flaw to spread malware across hundreds of PCsNewsThe Register — Security
- Hackers Deploy Malware in Fresh ScreenConnect CampaignNewsSecurityWeek
- ScreenConnect Attacks Target at Least 288 Endpoints Across 48 Organizations With Rogue ClientsNewsThe Hacker News
- Active ScreenConnect attacks breach MSPs, impact dozens of organizationsNewsBleepingComputer
- Malicious ScreenConnect deployments observedNewsSophos X-Ops
ID