[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fW7FfSYQM9oKEJ7mgA9KuKSdbiBLeNaFNojlepcPM32s":3},{"article":4,"iocs":42},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"full_text":11,"url":12,"image_url":11,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":25,"category":26,"article_tags":29},"e102ad92-7842-476d-98bd-dd7852c4054a","Power BI phishing campaign drops rogue ScreenConnect clients","power-bi-phishing-campaign-drops-rogue-screenconnect-clients-fe5d1e","Attackers are abusing Microsoft Power BI to host phishing lures that slip past email security, before dropping multiple rogue ScreenConnect clients on victims’ machines to secure persistent remote access, according to new research from Huntress. The campaign, first observed on 10 September, uses public Power BI dashboards on Microsoft’s legitimate app.powerbi.com domain as the landing […] The post Power BI phishing campaign drops rogue ScreenConnect clients appeared first on IT Security Guru.","Attackers are leveraging Microsoft Power BI to host phishing lures that bypass email security filters. These lures then deploy multiple rogue ScreenConnect clients on victim machines, establishing persistent remote access. The campaign, observed since September 10th, utilizes public Power BI dashboards on Microsoft's legitimate domain.","Power BI phishing campaign uses rogue ScreenConnect clients for remote access.",null,"https:\u002F\u002Fwww.itsecurityguru.org\u002F2026\u002F10\u002F07\u002Fpower-bi-phishing-campaign-drops-rogue-screenconnect-clients\u002F?utm_source=rss&utm_medium=rss&utm_campaign=power-bi-phishing-campaign-drops-rogue-screenconnect-clients","2026-10-07T14:20:03+00:00","2026-10-07T16:00:23.228494+00:00",7,[17,20,22],{"name":18,"type":19},"Power BI","product",{"name":21,"type":19},"ScreenConnect",{"name":23,"type":24},"Microsoft","vendor","89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5",{"id":25,"icon":11,"name":27,"slug":28},"Malware","malware",[30,35,37],{"category":31},{"id":32,"icon":11,"name":33,"slug":34},"26b0b636-0e31-4db1-bffb-61bdf9f20a58","Supply Chain","supply-chain",{"category":36},{"id":25,"icon":11,"name":27,"slug":28},{"category":38},{"id":39,"icon":11,"name":40,"slug":41},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[43],{"type":44,"value":45,"context":46},"domain","app.powerbi.com","Legitimate Microsoft domain used to host phishing lures."]