Kaspersky says 90+ spoofed domains use malicious installers and SEO to deliver AsyncRAT to Windows systems through ScreenConnect.

Researchers say the highly effective social engineering technique is no longer the exception for malware attacks — it's now the rule.