important · Privilege — ScreenConnect
An active ScreenConnect session can transfer and execute files without the host’s approval.
Affects
ConnectWise ScreenConnect Client, remote-support and unattended-access software installed on managed endpoints.
Huntress observed modified clients automatically transfer and execute VBS payloads on newly connected Windows endpoints.