Fake Adobe and Zoom updates deliver remote access software to Windows and macOS

Cybercriminals are using fake Adobe and Zoom update prompts to trick users into installing remote access software, giving attackers control of their computers, a Securonix report found. The campaign relies on social engineering, not software flaws, and impersonates updates, document reviews, and maintenance tools. Every attack installs legitimate ScreenConnect remote management software that connects victims to attacker-controlled servers. Attackers used phishing pages mirroring Zoom and Adobe, hosted payloads on Dropbox, and targeted Windows and macOS. They also disabled security defenses and adapted to evade detection.