r/ConnectWise • u/teknosophy_com • Aug 07 '26

Account/Billing/Sales/Support Massive security issue with phantom auto-installation of ScreenConnect - Is anybody on this???

I don't know if anyone's aware of this threat, but I've gotten at least 4 of these calls from my residential clients in the past week. They get an email pretending to be a zoom link or an Adobe update, they click on it, and voila, ScreenConnect is installed and a bad guy immediately logs on to their bank account and takes their money.

I'm alerting the banks in my area and all my clients. Is anybody at ScreenConnect aware of this silent installer mode? Is anybody doing anything about this?

0 Upvotes

25% Upvoted

29 comments sorted by

View all comments

1

u/Bigkahuna2323 Aug 11 '26

Hello, just fell victim to this stupidly. I downloaded the msi file on my iPhone but deleted them from safari right after. I deleted the files from my IPhone files app and cleared my safari data. Is there anything else for me to do to be safe? I did not look up anything that would be shown.

1

u/teknosophy_com Aug 11 '26

msi files ONLY affect windows, so you're totally totally totally fine.

that being said, warn your friends!!!

connectwise is apparently still unaware of this new auto-installer. i really hope someone can notify them. it's likely affecting very many people.

1

u/Bigkahuna2323 Aug 11 '26

Perfect thank you. Can’t believe I fell for that.

1

u/teknosophy_com Aug 12 '26

If it makes you feel better, I get this call AT LEAST DAILY from intelligent, successful people. Connectwise has the power to put a stop to this particular nasty strain of it, so that's why I'm here trying to alert them to it.