> TritonInfoSec News
Home / May 05, 2026 / Story
0
#7 The Hacker News general May 04, 2026 at 18:06 UTC

Phishing Campaign Hits 80+ Orgs Using SimpleHelp and ScreenConnect RMM Tools

By [email protected] (The Hacker News)

AI Summary

The VENOMOUS#HELPER phishing campaign has targeted over 80 organizations since April 2025, primarily in the U.S., using legitimate RMM tools SimpleHelp and ScreenConnect to establish persistent remote access. Attackers abuse these remote monitoring and management tools to evade detection after initial compromise through phishing vectors.

Read full article → https://thehackernews.com/2026/05/phishing-campaig…

Relevance score: 80.0/100

# More from May 05

  1. 1
    CISA says ‘Copy Fail’ flaw now exploited to root Linux systems BleepingComputer
  2. 2
    Over 40,000 Servers Compromised in Ongoing cPanel Exploitation SecurityWeek
  3. 3
    Exploit Cyber-Frenzy Threatens Millions via Critical cPanel Vulnerability Dark Reading
  4. 4
    Progress warns of critical MOVEit Automation auth bypass flaw BleepingComputer
  5. 5
    Trellix discloses data breach after source code repository hack BleepingComputer
  6. 6
    Instructure confirms data breach, ShinyHunters claims attack BleepingComputer
  7. 8
    Backdoored PyTorch Lightning package drops credential stealer BleepingComputer
  8. 9
    DigiCert Revokes Certificates After Support Portal Hack SecurityWeek
  9. 10
    Silver Fox Deploys ABCDoor Malware via Tax-Themed Phishing in India and Russia The Hacker News