Kaspersky says 90+ spoofed domains use malicious installers and SEO to deliver AsyncRAT to Windows systems through ScreenConnect.

Separate but similar campaigns described by Microsoft and Trend Micro use malicious zip files to spread malware via social ...