Fraudulent payroll apps install remote access tool in US companies

An attacker offers 'desktop apps' for three US payroll and HR platforms that have never released any.

Published 2h1 sourceNotable

≈ 20sSpeed

The fact

The installers deploy ScreenConnect, a legitimate remote access tool configured for unauthorized control.

Allure Security identified the campaign, targeting corporate financial services.

Click the link to read an article on the topic:

Explore this topic

Auto-synthesis from 1 media source · identified on September 25, 2026