Skip to content
Hackers Weaponize ScreenConnect to Spread Worm

Hackers Weaponize ScreenConnect to Spread Worm

Ground.News September 3, 2026

Hackers Weaponize ScreenConnect to Spread Worm-Like Malware Across Windows Systems

Hackers are turning rogue remote-support installations into a tool that can spread malicious code between Windows computers. The activity stands out because an infected remote-access client can pass staged payloads to connected systems, widening an intrusion without a lure for every victim. The campaign began with social engineering, including fake technical-support interactions, phishing, and a […]

Rogue ScreenConnect Clients Spread Worm-Like Malware Across Connected Windows Systems

Hijacked ScreenConnect Installs Are Spreading Malware Like a Worm, Huntress Warns

Cybersecurity firm Huntress has uncovered a wave of malicious installations of ScreenConnect, a widely used remote-support tool, that spread between machines without any further action from a victim or an attacker, a self-propagating attack chain researchers likened to a computer worm. In a blog post published this week, Huntress said its Security Operations Center (SOC) had flagged the same unusual pattern of activity across several unrelated c…

There is no tracked Bias information for the sources covering this story.

To view factuality data please Upgrade to Premium

To view ownership data please Upgrade to Vantage

Extracted Entities

Attack Types (3)

MITRE ATT&CK (1)

Platforms (1)

Tools (1)