TransferXL

Attackers are phishing employees into installing rogue ITarian and ScreenConnect clients

Huntress says three of its SOC investigations began with document lures and ended with victims installing rogue ITarian and ScreenConnect clients, and its responders now find RMM abuse in almost 40% of the incidents they work.