Hackers build fake desktop apps to trick victims into handing over access
Finance and HR departments are being offered tools that don't exist, tricking them into handing over valuable access.
Cybercriminals are deceiving large American HR and payroll platforms by creating fake desktop clients using Lovable, a legitimate AI-powered website building service. Victims unknowingly downloaded a modified version of ConnectWise’s ScreenConnect, a remote desktop and support platform. The attackers set the access mode to unattended, allowing them to access the victim's computer without alerting them.
Researchers observed 291 downloads, but it's uncertain if these represented actual victims or merely researchers and sandboxes. The ultimate goal of this attack remains unclear, but it could potentially lead to wire fraud by granting unauthorized access to payroll systems.
Written by urgent.news from TechRadar's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
