Microsoft Power BI Phishing Campaign Deploys Rogue ScreenConnect RMMs for Persistent Access
A phishing campaign is abusing Microsoft Power BI to deliver rogue ScreenConnect installations and give attackers lasting remote access to Windows systems. The operation uses a fake reference document hosted on Microsoft’s real service, making the opening link appear safe before directing victims...