Financial Fraud

Phishing Campaign Posing as Bank of America Installs Trojanised ScreenConnect with Silent UAC Bypass

Huntress says the attack fingerprints devices, escalates privileges with an ICMLuaUtil exploit, and alters service SDDL and ACLs to hide long‑term remote access.