src_09264703f4651ad659
- Source-provided label
- Not reported
- Evidence class
- mentioned in report
- Confidence
- Not reported
- Observed
- Oct 07, 2026 14:20 UTC
- Retrieved
- Oct 08, 2026 03:46 UTC
Power BI phishing campaign drops rogue ScreenConnect clients
Attackers are abusing Microsoft Power BI to host phishing lures that slip past email security, before dropping multiple rogue ScreenConnect clients on victims’ machines to secure persistent remote access, according to new research from Huntress. The campaign, first observed on 10 September, uses public Power BI dashboards on Microsoft’s legitimate app.powerbi.com domain as the landing […] The post
Reference details
- Source category
- Research & news
- Report title
Power BI phishing campaign drops rogue ScreenConnect clients- First reported
- Oct 07, 2026 14:20 UTC
- Last reported
- Oct 07, 2026 14:20 UTC
- Catalog updated
- Oct 08, 2026 03:46 UTC
- Record ID
3751241364b9ca2c6a6da2116902f99bd08d8bc847e734d3b2c7aa607a390d98
Published indicators
Network indicators are visibly defanged. This page does not make them clickable or send them to another service.
No validated file hashes or network indicators are stored for this record.
Source observations
This record contains metadata and attribution only. It does not host, download, unpack, render, or execute malware samples.