Attackers abuse ScreenConnect access to deploy SCKit malware, targeting at least 288 endpoints across 48 organizations.
Attackers have taken over cloud-hosted ScreenConnect panels and used them to push a custom toolkit called SCKit to at least ...
AntiFox-linked intrusions used IIS web shells and valid AWS credentials to enumerate cloud services and access production ...