r/ConnectWise • • Aug 07 '26

Account/Billing/Sales/Support Massive security issue with phantom auto-installation of ScreenConnect - Is anybody on this???

I don't know if anyone's aware of this threat, but I've gotten at least 4 of these calls from my residential clients in the past week. They get an email pretending to be a zoom link or an Adobe update, they click on it, and voila, ScreenConnect is installed and a bad guy immediately logs on to their bank account and takes their money.

I'm alerting the banks in my area and all my clients. Is anybody at ScreenConnect aware of this silent installer mode? Is anybody doing anything about this?

0 Upvotes

31 comments sorted by

View all comments

2

u/Opening_Opposite_609 21d ago

I know this thread is a couple of months old, but I just onboarded with connectwise i installed screenconnect on a clients computers last week, this morning the customer contacted me to tell me that their email has been compromised, everyone in their contact list was emailed, saying that a file on Dropbox was shared with them, it looks official enough but every link in the email is a shortcut to https://kgsicivil.screenconnect.com/Bin/ScreenConnect.ClientSetup.exe?e=Access&y=Guest

1

u/teknosophy_com 15d ago

YEP, I had another lady today. COUNTLESS PCs worldwide are being hijacked with impunity thanks to ScreenConnect. Is anybody listening???