PhishingReviewed
SpiderLabs: fake HireRight background-check emails abuse Calendly to install ScreenConnect
SpiderLabs says fake HireRight emails abuse Calendly forms to deliver a ScreenConnect MSI from treffert.screenconnect.com. HireRight, Calendly and ScreenConnect are not involved.
- Attacker ScreenConnect instance treffert.screenconnect.com; abused calendly.com/d/ forms
Reported Nov 9, 20261 report