Ta2541 is a apt_group tracked across 1 threat cluster and 1 intelligence report mention on ThreatCluster. First observed July 1, 2026; most recent activity July 1, 2026.
A significant cybersecurity campaign has emerged, exploiting the legitimate remote access tool ScreenConnect to deploy AsyncRAT malware. Attackers utilized spoofed websites and typosquatted domains, masquerading as…