Skip to content
Threat Feed
Subscribe

Tag

Msi

3 briefs RSS
medium advisory

Remote Management Software Launch After MSI Install

Attackers are leveraging MSI installers to deploy remote management software (RMM) such as ScreenConnect, Syncro, and VNC, potentially indicating unauthorized access and control over compromised systems.

ConnectWise ScreenConnect +3 remote-access rmm msi command-and-control
3r
high advisory

Briefcase MSI Installer Privilege Escalation Vulnerability

Briefcase versions 0.3.0 to 0.3.25 create an insecure directory during Windows MSI installer creation, leading to potential privilege escalation by allowing low-privilege users to modify binaries that may be executed by administrators.

Briefcase privilege-escalation windows msi
2r 1t
medium advisory

Remote Management Access Launch After MSI Install

Detects a suspicious sequence of an MSI installer execution immediately followed by the execution of commonly abused Remote Management Software, potentially indicating unauthorized remote access.

ScreenConnect +3 remote-access command-and-control rmm msi
2r