Fake Adobe and Zoom Updates Install ScreenConnect for Persistent Remote Access

Cybersecurity researchers have revealed an ongoing campaign that uses social engineering tactics to trick victims into installing Remote Monitoring and Management programs, specifically ConnectWise ScreenConnect, by disguising them as updates for Adobe and Zoom software. The campaign also uses lures related to business document reviews and system maintenance utilities to deploy the RMM programs, which allow for persistent remote access. The campaign has been given the codename SMOKE#SCREEN by Securonix Threat researchers.