Gbhackers iconGbhackersSep 3, 2026

Rogue ScreenConnect Clients Spread Worm-Like Malware Across Connected Windows Systems

A malicious ScreenConnect campaign in which rogue remote-access clients do more than provide attackers with hands-on control: modified clients can automatically push a multi-stage VBScript malware chain to newly connected Windows endpoints.

Rogue ScreenConnect Clients Spread Worm-Like Malware Across Connected Windows Systems

Share this story

Send the public story page.

Useful takeaways from this story.

A malicious ScreenConnect campaign in which rogue remote-access clients do more than provide attackers with hands-on control: modified clients can automatically push a multi-stage VBScript malware chain to...

Building the complete brief

The page is ready to read now. The fuller skim-friendly version will appear here automatically.

The useful part

A malicious ScreenConnect campaign in which rogue remote-access clients do more than provide attackers with hands-on control: modified clients can automatically push a multi-stage VBScript malware chain to newly connected Windows endpoints.

Details worth keeping

A malicious ScreenConnect campaign in which rogue remote-access clients do more than provide attackers with hands-on control: modified clients can automatically push a multi-stage VBScript malware chain to newly connected Windows endpoints.

Keep reading in the app

Open the app view to save this story, compare related coverage, and continue from the same source.

Open in app