Hackers distribute ScreenConnect remote access tool via fake Adobe Acrobat pages
PHISHINGAdobe Acrobatredteam/daily · 1 source
- Severity
- High
- Sources
- 1
What happened
CloudSEK researchers report fake Adobe Acrobat landing pages distributing signed ScreenConnect installers pre-configured for attacker-controlled remote access to Windows systems. The article does not list affected versions or CVE identifiers. Defenders should block the lookalike domains, restrict installation of remote management tools to approved software, and hunt for unexpected ScreenConnect instances.
For security analysts · Written by AI from 1 source · Wrong?
What to do
- Only download Adobe Acrobat from the official Adobe website.
- Check whether ScreenConnect is installed on your machines and remove any you do not recognise.
- Block access to the fake Acrobat download pages and restrict unapproved remote access tools.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
HackRead
Who and what is in it
Companies
Products