Security · 2h ago
SEO-Poisoned Sites Use ScreenConnect to Spread AsyncRAT Malware
Threat actors are using SEO-poisoned websites to distribute malicious installers disguised as popular software like OBS Studio and Bandicam. The installers leverage ScreenConnect remote access tool to deploy AsyncRAT, a remote access trojan. Kaspersky describes the campaign as massive, multi-domain, and multi-language.
Meridian48 take
The campaign's reliance on SEO poisoning and legitimate remote tools highlights how attackers exploit trust in search results and dual-use software.
Read the full reporting
SEO-Poisoned Software Sites Abuse ScreenConnect to Deploy AsyncRAT →
The Hacker News
seo-poisoningremote-access-trojan