The Huntress Cybersecurity Blog

The Huntress Cybersecurity Blog

Welcome to the Huntress Cybersecurity Blog, where we cut through the noise with real-world tradecraft to help you stay ahead of today’s threat actors. Our authors bring diverse backgrounds and hands-on experience to make cybersecurity education engaging, accessible, and grounded in the threats you actually face.

Threat Analysis

Rogue ScreenConnect Installations Across Unrelated Hosts Suggest Worm-Like Activity

Huntress is tracking a pattern across multiple customer environments where rogue ScreenConnect clients repeatedly spawn the Windows Script Host to execute a series of four VBScript files.

Sep 3, 2026

Featured Categories

Threat Analysis

Threat Analysis

Dive in and nerd out with us on current and emerging cybersecurity threats. We cover attack vectors, threat actors, and new vulnerabilities, providing insights to help you understand and counteract these risks.

No posts found.

Attacker Tradecraft

Attacker Tradecraft

Understanding how attackers operate is the closest thing to a durable advantage. Attacker Tradecraft covers the techniques that don't make headlines but show up in nearly every investigation: TTPs, persistence mechanisms, defense evasion, living-off-the-land techniques, and offense-informed defense strategies. Not breaking news — evergreen knowledge that empowers your team.

No posts found.