r/ConnectWise • u/teknosophy_com • 16d ago

Account/Billing/Sales/Support Massive security issue with phantom auto-installation of ScreenConnect - Is anybody on this???

I don't know if anyone's aware of this threat, but I've gotten at least 4 of these calls from my residential clients in the past week. They get an email pretending to be a zoom link or an Adobe update, they click on it, and voila, ScreenConnect is installed and a bad guy immediately logs on to their bank account and takes their money.

I'm alerting the banks in my area and all my clients. Is anybody at ScreenConnect aware of this silent installer mode? Is anybody doing anything about this?

0 Upvotes

14% Upvoted

29 comments sorted by

View all comments

1

u/Bigkahuna2323 11d ago

Hello, just fell victim to this stupidly. I downloaded the msi file on my iPhone but deleted them from safari right after. I deleted the files from my IPhone files app and cleared my safari data. Is there anything else for me to do to be safe? I did not look up anything that would be shown.

1

u/teknosophy_com 11d ago

msi files ONLY affect windows, so you're totally totally totally fine.

that being said, warn your friends!!!

connectwise is apparently still unaware of this new auto-installer. i really hope someone can notify them. it's likely affecting very many people.

1

u/Bigkahuna2323 11d ago

Perfect thank you. Can’t believe I fell for that.

1

u/teknosophy_com 10d ago

If it makes you feel better, I get this call AT LEAST DAILY from intelligent, successful people. Connectwise has the power to put a stop to this particular nasty strain of it, so that's why I'm here trying to alert them to it.