Frequency
2
occurrences
First Seen
November 26, 2025
Last Seen
July 1, 2026
Related Threat Clusters
-
Widespread Abuse of ScreenConnect to Deploy AsyncRAT via Fake Installers
A significant cybersecurity campaign has emerged, exploiting the legitimate remote access tool ScreenConnect to deploy AsyncRAT malware. Attackers utilized spoofed websites and typosquatted domains, masquerading as…
7 articles · Updated July 1, 2026 -
Microsoft to Disable NTLM by Default in Future Windows Releases
Microsoft announced plans to disable the NTLM authentication protocol by default in future Windows releases due to its security vulnerabilities that have been exploited in cyberattacks. NTLM, introduced in 1993, has…
10 articles · Updated January 30, 2026
Recent Intelligence Reports
- 012 — attack.mitre.org · July 1, 2026
- Old tech, new vulnerabilities: NTLM abuse, ongoing exploitation in 2025 — Securelist · November 26, 2025