Phishing Campaign Hits 80+ Orgs Using SimpleHelp and ScreenConnect RMM Tools

A phishing campaign, codenamed VENOMOUS#HELPER, has targeted over 80 organizations since April 2025, using legitimate Remote Monitoring and Management software to gain remote access. The campaign primarily affects US-based organizations. Securonix reported the activity, which shares overlaps with other clusters.