Detecting observed phishing URLs delivering RMM payload:

Wambua Thyaka@thyaka

•updated Jun 24, 2026•3•0•14

RMM: ScreenConnect Theme: DocuSign URL: hxxps://vy.ijnggpi[.]com/ftx/ MSI Download URL: hxxps://web-g63lkz.screenconnect[.]com/Bin/ScreenConnect.ClientSetup.msi SHA256: a30a9779079dc897a15fed27f27f614fab77a20e953368808ba99ac6c6a3375b