Phishing Campaign Abuses Microsoft Power BI to Deploy Rogue RMMs
A recent phishing campaign abused Microsoft Power BI links to deliver multiple rogue ScreenConnect clients.
- Vendor
- Microsoft, ConnectWise
- Product
- Dynamics / Power Platform, ScreenConnect / Automate
- Exposure class
- Remote access
Why it ranks 20 (Routine)
- Exposed product class: remote access
- Widely deployed vendor product (Microsoft)
- Threat research
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- Huntress (huntress.com)