Rogue ScreenConnect Clients Spread Four-Stage VBScript Chain to Newly Connected Hosts
ScreenConnect abuse shows worm-like propagation of a four-stage VBScript chain; ConnectWise advises disabling file transfers until a fix.
More info