[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"branding":3,"analytics":7,"article-fake-adobe-update-page-tricks-victims-into-remote-access-malware":10,"sections":35},{"siteName":4,"siteTagline":5,"publisherName":4,"contactEmail":6},"The Revision","Tech news, decoded.","editor@therevision.news",{"gaMeasurementId":8,"adsenseClientId":9},"G-ZW2MV82GYR","ca-pub-8533917693782264",{"article":11},{"id":12,"slug":13,"title":14,"dek":15,"body_md":16,"tags_json":17,"published_at":18,"created_at":19,"updated_at":20,"status":21,"review_note":22,"review_notes":23,"image_url":22,"persona_id":22,"persona_name":22,"section":24,"tags":25,"sources":30,"feedback":34,"feedback_at":22,"cost_usd":34,"total_tokens":34},6257,"fake-adobe-update-page-tricks-victims-into-remote-access-malware","Fake Adobe Update Page Tricks Victims Into Remote Access Malware","A phishing campaign spoofs Adobe with a fake browser window to trick targets into installing a poisoned ScreenConnect client for persistent remote access.","Scammers have built a fake browser window that mimics an Adobe download page, and clicking through installs a booby-trapped remote access tool instead of a PDF reader.\n\nSecurity firm Huntress reported a phishing campaign that spoofs Adobe's branding using a technique called browser-in-the-browser. Victims who click a link in an email land on a typosquatted domain, adoube.vu, that mimics an Adobe page. Instead of a real browser window, the page renders a fake one, complete with a fake address bar and padlock icon, showing a blurred PDF that supposedly requires \"the latest version of Adobe\" to open. Clicking \"View Files\" downloads not a PDF reader but a doctored version of ScreenConnect, a legitimate remote support tool, configured to phone home to the attackers.\n\nBrowser-in-the-browser fakes the one thing security training tells people to check, the address bar, which makes it harder to catch than typical phishing. Huntress said the attackers installed a second ScreenConnect client tied to their own infrastructure and ran a tool to hide the mouse cursor, suggesting hands-on-keyboard access rather than a scripted smash-and-grab. Huntress caught and shut down the intrusion before it went further, so it's unclear whether this was headed toward ransomware or something else.\n\nUsing a real, signed remote-support tool instead of custom malware is a familiar move. It's the same living-off-the-land trick abused for years with TeamViewer and AnyDesk, and it works precisely because a legitimate binary raises far fewer alarms than an obvious trojan.","[\"phishing\",\"adobe\",\"screenconnect\",\"malware\"]","2026-09-10T14:05:00.000Z","2026-09-10T15:19:30.810Z","2026-09-10T15:19:41.642Z","published",null,[],"security",[26,27,28,29],"phishing","adobe","screenconnect","malware",[31],{"name":32,"url":33},"TechRadar","https:\u002F\u002Fwww.techradar.com\u002Fpro\u002Fsecurity\u002Fwatch-out-these-new-phishing-attacks-use-a-convincing-fake-adobe-reader-pages-to-trick-victims-into-installing-malware",0,{"sections":36},[37,42,45,50,55,60,65,69,74,79,84,89,94,99],{"name":38,"slug":39,"count":40,"latest_published_at":41},"AI","ai",3480,"2026-09-11T04:00:00.000Z",{"name":43,"slug":24,"count":44,"latest_published_at":41},"Security",628,{"name":46,"slug":47,"count":48,"latest_published_at":49},"Policy","policy",336,"2026-09-11T00:56:21.000Z",{"name":51,"slug":52,"count":53,"latest_published_at":54},"Deals","deals",179,"2026-06-29T20:02:07.000Z",{"name":56,"slug":57,"count":58,"latest_published_at":59},"Hardware","hardware",153,"2026-09-09T15:12:32.000Z",{"name":61,"slug":62,"count":63,"latest_published_at":64},"Consumer Tech","consumer-tech",99,"2026-09-09T17:27:33.000Z",{"name":66,"slug":67,"count":68,"latest_published_at":41},"Science","science",98,{"name":70,"slug":71,"count":72,"latest_published_at":73},"Software","software",75,"2026-09-10T20:41:21.000Z",{"name":75,"slug":76,"count":77,"latest_published_at":78},"Dev Tools","dev-tools",69,"2026-08-18T04:00:00.000Z",{"name":80,"slug":81,"count":82,"latest_published_at":83},"Startups","startups",55,"2026-09-09T23:14:29.000Z",{"name":85,"slug":86,"count":87,"latest_published_at":88},"Gaming","gaming",43,"2026-09-10T12:18:06.000Z",{"name":90,"slug":91,"count":92,"latest_published_at":93},"General","general",41,"2026-09-08T01:57:23.000Z",{"name":95,"slug":96,"count":97,"latest_published_at":98},"Reviews","reviews",20,"2026-06-24T12:00:01.000Z",{"name":100,"slug":101,"count":102,"latest_published_at":103},"How-To","how-to",6,"2026-06-16T09:00:00.000Z"]