SMOKE#SCREEN Campaign Abuses ScreenConnect RMM and Cloudflare Tunnels to Hijack Windows and macOS Systems
A new scam campaign is disguising harmful files as normal software updates or business documents to trick people into giving strangers control of their computers. It can affect both Windows PCs and Apple Macs, making it a broader risk for homes and workplaces.
Who is at risk
Anyone who downloads or opens software updates, shared work files, or unexpected attachments on a Windows or Mac computer is at risk, especially employees and small businesses.
What to watch for
Watch for unexpected update prompts, files asking you to install something, sudden remote-control pop-ups, or your computer acting strangely after opening a file.
What to do
Only install updates from built-in system settings or the official app website, avoid opening unexpected files, and disconnect from the internet and contact IT or a trusted tech helper right away if you think you installed something suspicious.