Backdoored ScreenConnect Clients Fuel Worm-Like Malware Campaign

A campaign is leveraging modified ScreenConnect clients to propagate payloads to newly connected clients, enabling worm-like spread. The technique suggests a novel supply-chain or trust-abuse vector, though attribution and scale remain unconfirmed. This matters because it indicates an evolving attack method that could expand rapidly within trusted remote-access ecosystems.