ScreenConnect Malware Campaign Uses SEO Poisoning to Target Freeware Downloads

A massive, multi-language malware campaign that exploits the legitimate remote administration tool ScreenConnect. The threat actors employ sophisticated search engine optimization (SEO) poisoning to push malicious websites to the top of Google and Bing search results, tricking users into downloading what appears to be legitimate freeware. This highly coordinated attack ultimately deploys the AsyncRAT remote access trojan, allowing the attackers to maintain persistent, remote…

Diamond Model