Phishing Campaign Hits 80+ Orgs Using SimpleHelp and ScreenConnect RMM Tools

A phishing campaign tracked as VENOMOUS#HELPER has targeted over 80 organizations since at least April 2025, primarily in the U.S., according to Securonix. The attackers use legitimate Remote Monitoring and Management software, including SimpleHelp and ScreenConnect, to gain persistent remote access to compromised systems.