Breach
SCKit malware reported in ScreenConnect attacks targeting MSPs
A BleepingComputer Bluesky post says a worm-like malware toolkit named SCKit was deployed in recent ScreenConnect attacks on managed service providers.
Written by a model from the sources below. Verify against them.
- Vendor
- ScreenConnect
- Product
- ScreenConnect
- Status
- Corroborated
- Disclosed
- Data taken
- 288 records
Summary
The post gives no further details, such as affected systems or how the attackers got in.
What to do
Read the full BleepingComputer report for indicators of compromise.
Review ScreenConnect sessions for unexpected remote-access clients or connections.
Timeline
- Made public by BleepingComputer on Bluesky
- First seen by cve.now
What was taken
288 records, perBleepingComputer on Bluesky
| Taken | Per the source |
|---|
Evidence 1
- PressBleepingComputer on Bluesky
“A new worm-like malware toolkit named SCKit was deployed in the recent ScreenConnect attacks targeting managed service providers (MSPs), designed to spread from infected customer devices to MSP technicians' computers and compromise additional managed networks.”
Corrections
None so far.
Something wrong on this page? Report an error. Every fix is listed here.
Questions about the ScreenConnect breach
Was ScreenConnect breached?
BleepingComputer on Bluesky reports it. No statement from ScreenConnect has reached cve.now yet.
What data was exposed?
288 records.
What should ScreenConnect customers do?
Read the full BleepingComputer report for indicators of compromise. Review ScreenConnect sessions for unexpected remote-access clients or connections.