Security1 hSeptember 29, 2026, 08:20

Hackers spoof US HR platforms with fake desktop apps to gain remote access

Allure research uncovered a campaign where attackers used Lovable to build fake landing pages for three major US HR and payroll platforms, offering a desktop client that doesn't exist. Victims downloaded a modified ScreenConnect build from GitHub granting hidden unattended remote access; the download page showed about 291 downloads.

TechRadar

Open source

Hackers spoof US HR platforms with fake desktop apps to gain remote access

Fake landing pages impersonated three major US HR and payroll platforms
Victims were offered a desktop client that legitimate services don't provide
A modified ScreenConnect build from GitHub gave hidden unattended remote access
The download page showed about 291 downloads; likely goal is payroll wire fraud

#ScreenConnect#GitHub#Lovable

Fake payroll desktop apps give attackers a route to company paychecks

Security

Calendar-based phishing jumps 33,000% since May, researchers say

Security

HYPR report: 98% of HR leaders faced candidate fraud

Security

Hackers spoof US HR platforms with fake desktop apps to gain remote access

Fake payroll desktop apps give attackers a route to company paychecks

Calendar-based phishing jumps 33,000% since May, researchers say

HYPR report: 98% of HR leaders faced candidate fraud

Critical ScreenConnect Flaw Actively Exploited in Attacks