Would you fall for this? And if you did, how long would it take your firm to recognize it? The Register reports:
You work in your company’s human resources department and use HR software to check employee information, benefits, and payroll. So, when you see a downloadable Windows version promising a faster alternative to the usual web interface, you grab it.
Unfortunately, the app isn’t what it claims to be. Instead, it silently installs ConnectWise’s legitimate ScreenConnect software, giving the operator persistent remote access to your PC.
Cybersecurity outfit Allure Security reported the discovery of the campaign Thursday, describing it as the latest evolution in a trend of abusing ScreenConnect and other remote monitoring and management software. This time, the main giveaway is knowing what the vendors actually sell: None offers the Windows app being advertised.
Read more at The Register.
