TTPwire Vol. 1 · MITRE ATT&CK·Tagged

← All stories

Huntress

Guide: How to Know if your ScreenConnect Server is Hacked | Huntress

2024-02-23 · Read original ↗

ATT&CK techniques detected

1 predictions
T1190Exploit Public-Facing Application
76%
"exist on one of your machines, it is considered impacted by this vulnerability. if these server components are not needed on a specific machine, we would recommend removing them. - screenconnect web server - screenconnect session manager - screenconnect security manager - screenc…"

Summary

Huntress Guide: Review this guide on how to tell which ScreenConnect Server autoruns are found on your endpoint so you can quickly find and remove them.