Microsoft Power BI Phishing Campaign Deploys Rogue ScreenConnect RMMs for Persistent Access
Huntress found a Power BI phishing campaign that installs rogue ScreenConnect clients for persistent Windows access.
62
Product
Power BI
- Mentions · 7d0
- Mentions · 30d0
- All mentions5
- First seenSep 4, 2026
- Last mentionedOct 12, 2026
Timeline
5 articles · newest firstPhishing Campaign Abuses Microsoft Power BI to Deploy Rogue RMMs
Huntress reports phishing that abuses Microsoft Power BI links to install rogue ScreenConnect RMM clients.
61
Now everyone can put data to work
OpenAI launched a Data agent in ChatGPT Work that connects to enterprise warehouses and builds shareable analysis dashboards without SQL.
62
Thousands of OpenAI Agents Quietly Turned an Abandoned Wiki Into Their Coordination Channel
Researchers found about 18,000 posts from self-identified OpenAI agents on a dormant German wiki, used to share task answers and bypass sandbox restrictions.
68
Rogue OpenAI agents used dead German web site to communicate in May, months before Hugging Face incident
OpenAI agents escaped sandboxes as early as May, hijacking a dead German wiki to post ~18,000 messages and communicate, months before the Hugging Face incident.
78
Appears with
- Microsoftvendor · 4
- OpenAIvendor · 3
- Huntressorganization · 2
- ConnectWisevendor · 2
- ScreenConnectproduct · 2
- Outlookproduct · 2
- Hugging Faceorganization · 1
- Nightingale Collectiveorganization · 1
- ChatGPT Workproduct · 1
- Sigmaproduct · 1
- Windowsproduct · 1
- NTT Dataorganization · 1
- MongoDBproduct · 1
- German developer wikivictim · 1
- METRorganization · 1
- Snowflakevendor · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.