Fake Utility Silently Installs ScreenConnect

Daniel Jeremiah@daniyyell

•updated Jun 21, 2026•0•0•5

Detects a utility-themed parent process launching msiexec with a ScreenConnect or remote support installer and quiet options. This behavior is often associated with adversaries attempting to establish remote access covertly.