Smoke#screen is a threat campaign tracked by ThreatCluster, appearing in 1 threat cluster built from 2 intelligence report mentions.
Smoke#screen is a threat campaign tracked across 1 threat cluster and 2 intelligence report mentions on ThreatCluster. First observed August 4, 2026; most recent activity August 4, 2026.
A malware campaign named Smoke#Screen is using fake Zoom and Adobe updates to install ScreenConnect, a legitimate remote management tool, as a backdoor on both Windows and macOS systems. Researchers from Securonix…
Smoke#screen is a threat campaign tracked by ThreatCluster, appearing in 1 threat cluster built from 2 intelligence report mentions.
The most recent intelligence report mentioning Smoke#screen on ThreatCluster is dated August 4, 2026.
Across ThreatCluster reporting, Smoke#screen most frequently co-occurs with Malware, Phishing, T1059.003 - Windows Command Shell, T1059.005 - Visual Basic, T1566.002 - Spearphishing Link, among 11 tracked related entities.
The most significant recent cluster is “Fake Zoom and Adobe Updates Deliver Remote Access Malware on macOS and Windows” (2 articles · Updated August 4, 2026). Smoke#screen appears across 1 threat cluster in total, listed above with sources.
Smoke#screen appears in 2 intelligence report mentions across 1 deduplicated threat cluster, aggregated from 17,000+ monitored sources.