Phishing Attack Compromises Over 80 Organizations in U.S.
A new phishing campaign, dubbed VENOMOUS#HELPER, has targeted more than 80 organizations across the United States since April 2025. The attackers employ legitimate Remote Monitoring and Management (RMM) software, such as SimpleHelp and ScreenConnect, to gain persistent access to compromised systems.
The attack begins with phishing emails impersonating the U.S. Social Security Administration, urging recipients to verify their email addresses. Victims are then led to download malware disguised as an SSA statement, which installs RMM tools that facilitate further exploitation.
Affected organizations face serious risks, including unauthorized access to sensitive data and potential financial loss. To protect against such threats, users are advised to be cautious with email links, implement multi-factor authentication, and regularly update security software.
Risk Level: High. The sophistication of this attack and its widespread impact highlight the urgent need for enhanced cybersecurity measures.
Source: View Original Report
