indicatorurl
hxxp://51[.]89[.]242[.]48:8040/Bin/ScreenConnect[.]ClientSetup[.]msi
- First seen
- 2026-05-14
- Last seen
- 2026-05-14
- Sightings
- 1
Posts referencing this indicator
- Phishing-to-RMM Attacks: The Remote Access Blind Spot CISOs Can’t Ignore
Direct download URL for ScreenConnect payload