A credential-stealing worm hidden in more than 400 compromised npm packages automatically spread across software ecosystems ...
SMOKE#SCREEN uses fake Adobe and Zoom updates, document lures, and trusted cloud services to install ScreenConnect for persistent remote access.