{"version":"1.0","type":"rich","provider_name":"RootPwn","provider_url":"https://rootpwn.me","title":"Browser‑in‑the‑Browser Phishing Enables Rogue ScreenConnect Persistence","description":"Attackers used a phishing campaign that delivered a browser‑in‑the‑browser (BIB) page, enabling installation of a rogue ScreenConnect remote‑management module that persisted on victim endpoints. The technique bypassed standard endpoint detection and allowed stealthy lateral movement. Defenders shoul","url":"https://rootpwn.me/news/browser-in-the-browser-phishing-enables-rogue-screenconnect-persistence","thumbnail_url":"https://rootpwn.me/images/5063aaab54de457fa60fbc198d9c4872.jpg","thumbnail_width":1600,"thumbnail_height":900}