Find notable cyber news and cases, enriched with sources, timelines, and signals.
Home Watchlists Beta Browse News Feed Stats About Contact

Faronics Deploy adds anti-abuse measures after confirmed abuse

Security Tool/Service
First reported
Last updated
Happening score
H score 34
1 unique sources, 1 articles

Summary

Hide ▲

Faronics tightened Faronics Deploy with additional anti-abuse measures after confirming malicious use of the platform, reducing abuse activity across the service. The response matters because the platform’s remote-deployment features were being used to obtain unauthorized administrative control and stage further access on endpoints.

Related Happenings

Faronics Deploy phishing campaign to install ScreenConnect

Campaign
H score34 First: 01.09.2026 23:53 Last: 01.09.2026 23:53 Sources 1

How related: Phishing actors are abusing the legitimate Faronics Deploy endpoint-management platform to gain remote administrative control over victim computers and install the ScreenConnect remote support software.

About this happening: A phishing campaign is abusing Faronics Deploy to enroll victim endpoints and install ConnectWise ScreenConnect, giving attackers remote administrative control and...

Open Happening

ClickFix multi-loader delivery campaign targeting Windows and macOS users

Campaign
H score34 First: 16.06.2026 20:41 Last: 16.06.2026 20:41 Sources 1

About this happening: The ClickFix malware-delivery campaign is spreading BabaDeda Loader, Lorem Ipsum Loader, and Potemkin, widening risk for Windows and macOS users across several...

Open Happening

Havoc Demon payload deployment and persistence operation

Malware Activity
H score22 First: 03.03.2026 19:15 Last: 03.03.2026 19:15 Sources 1

About this happening: A fake IT support operation is deploying Havoc Demon payloads to preserve access across compromised endpoints and support likely data exfiltration or ransomware fo...

Open Happening

Timeline

  1. 01.09.2026 23:53 2 articles · 2h ago

    Faronics confirms malicious abuse of Faronics Deploy and adds anti-abuse measures

    Initial Disclosure

    On August 5, Huntress notified Faronics that phishing actors were abusing Faronics Deploy to gain remote administrative control and install ConnectWise ScreenConnect, and Faronics confirmed the malicious activity, implemented additional anti-abuse measures, and contacted victimized organizations about potential compromise.

    Show sources
    Open in new tab
  2. 01.09.2026 23:53 1 articles · 2h ago

    Malicious activity against Faronics Deploy drops after anti-abuse measures

    Mitigation Patch Update

    Starting August 21, malicious activity abusing Faronics Deploy dropped significantly after Faronics implemented additional anti-abuse measures, indicating that the response was effective at constraining the abuse.

    Show sources
    Open in new tab