CERT24Worm-like SCKit malware targets MSPs in ScreenConnect attacksLoading data…
CERT24Threat Observatory
Period

Worm-like SCKit malware targets MSPs in ScreenConnect attacks

A new worm-like malware toolkit named SCKit was deployed in recent ScreenConnect attacks against managed service providers (MSPs). It was designed to spread from infected customer devices to MSP technicians’ computers and additional managed networks. However, Huntress and Blackpoint Cyber did not observe successful worm-like propagation or successful exploitation of CVE-2026-84869.

← Back to intelligence

Worm-like SCKit malware targets MSPs in ScreenConnect attacks

A new worm-like malware toolkit named SCKit was deployed in recent ScreenConnect attacks against managed service providers (MSPs). It was designed to spread from infected customer devices to MSP technicians’ computers and additional managed networks. However, Huntress and Blackpoint Cyber did not observe successful worm-like propagation or successful exploitation of CVE-2026-84869.