From Fake DocuSign to ScreenConnect: Attack Blocked

Reported 11 Sep 2026 by otx · Severity: medium

Threat actors exploited trusted brands and cloud services in a sophisticated web campaign combining fraudulent DocuSign workflows, Florida healthcare screening lures, and deceptive cloud infrastructure to deploy ConnectWise ScreenConnect Access clients. The attack utilized Cloudf