Fake DocuSign emails luring recipients into downloading a fake Adobe Acrobat Reader update, leading to ConnectWise #ScreenConnct RMM 🖥️🖱️ email ➡️ Link ➡️ PDF ➡️ MSI Payload delivery URLs: 📕 data.vaceditions .com/wp-content/new-statement.pdf ⚙️ acrob.my-adobe-plugins-update .top Malware sample ⤵️ https://bazaar.abuse.ch/sample/9f34ec35fc57b33ee6118fb608abc46c1e7b9ff89955a158b6c8812b48ed2963/ Rogue ScreenConnect servers: 📡 owo.efunmilowoonline .top (NameSilo 🇺🇸) 📡 153.52.178.118:8041 (Hyonix🇺🇸)