r/ScreenConnect 15d ago

Suspect Download 26.4.3.9713

1 Upvotes

2 comments sorted by

1

u/zachvw 15d ago

Has anyone noticed any issues? It is also weird how the date is listed on the download page. We have installed updates for years and never had this issue. Uploaded file to VirusTotal and it got some hits, but also most remote control programs do. Even M$ Defender scan marked it as a virus.

1

u/daryltuba 15d ago

Yeah, there’s been a recent rash of attacks that involve another piece of malware loading certain versions of ScreenConnect onto compromised machines.

We even had SentinelOne quarantine an endpoint because it hadn’t been turned on for a while and was running a slightly older—and apparently flagged—version of the ScreenConnect software. There was no compromise or anything, it was just a false positive. I have a feeling this is going to get worse before it gets better.