AI-generated phishing infrastructure

Attacker impersonates three payroll platforms to plant ScreenConnect on payroll PCs

A single operator is distributing fake "desktop apps" for three US payroll platforms that have no desktop product. Each installer silently sets up ScreenConnect for unattended control of the payroll operator's machine, Allure Security found.