Tag: connectwise screenconnect

1 Attack Reports | 0 Vulnerabilities

Attack reports

OPERATION SILENTCANVAS: JPEG BASED MULTISTAGE POWERSHELL INTRUSION

A sophisticated multi-stage intrusion campaign was identified leveraging a weaponized PowerShell payload disguised as a JPEG image file (sysupdate.jpeg) to deploy a trojanized ConnectWise ScreenConnect instance for covert remote access. The attack likely originates through social engineering techni…
surveillance
powershell
credential theft
uac bypass
fileless execution
amsi bypass
2026-05-10
connectwise screenconnect
lolbin abuse
Published: May 10, 2026
Downloadable IOCs: 7
Click here to see more Attack Reports