New Malware Framework Enables Screen Control and UAC Bypass

Gbhackers •Mayura Kathir • May 14, 2026

A sophisticated malware framework capable of screen control, browser artifact access, and User Account Control (UAC) bypass, highlighting how attackers are increasingly adapting open-source tools for real-world intrusions. The attack chain revealed a carefully staged operation designed to blend into normal enterprise traffic. Investigators observed suspicious infrastructure activity, host-level artifacts, and command-and-control (C2) communication patterns […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

New Malware Framework TencShell Enables Remote Control and UAC Bypass A sophisticated malware framework named TencShell has been identified, capable of screen control, browser artifact access, and User Account Control (UAC) bypass. This framework allows attackers to gain full remote control over compromised systems. The operation is characterized by its stealthy integration into normal enterprise traffic, making detection challenging. Investigators noted suspicious infrastructure activity and command-and-control communication patterns associated with this malware. The discovery raises alarms within the cybersecurity community regarding the repurposing of open-source tools for targeted intrusions. Organizations are urged to enhance their defenses against such sophisticated attacks. The full scope of affected systems and potential victims is still being assessed. 2 sources 65

New Malware Framework Enables Screen Control and UAC Bypass

The full story

Extracted Entities

Attack Types (1)

MITRE ATT&CK (2)