Phishing actors

Hackers Abuse Faronics Deploy Admin Tool to Install ScreenConnect

Security researchers report that threat actors are abusing the Faronics Deploy endpoint-management platform to gain remote administrative control over victim computers and install the ScreenConnect remote support software. The abuse was first highlighted by BleepingComputer on September 1, 2026. No specific vulnerability in Faronics Deploy itself has been identified; instead, attackers are using phishing to exploit the administrative capabilities of the tool.