Attackers abuse ScreenConnect client for remote access intrusions

Threat actors are leveraging the legitimate ScreenConnect remote access tool to conduct intrusions, abusing its features rather than deploying custom malware. The technique is not novel but highlights a persistent pattern of living-off-the-land tactics. The full scope and targeted sectors remain unclear, but the abuse of a trusted tool increases detection difficulty.