They have to know by now that their software is being used as a RAT on a lot of innocent people’s devices, right?
Carehelp.live connects to Connectwise
Had a walmart scam today take me to phelp.pro
Ok! List has now ben updated!
Some geek asshole took me here today…pahelp.us/
rcare.cc
Interesting one today from a Norton scam though NOT a connectwise link…150.co.il
carehelp.live iframes https://matry.top/guest.aspx
Bumping this so people can see the domain list has been updated.
Does connectwise / screenconnect have a twitter? Do they have a contact form?
They’re probably already aware that their software is being used as malware, but they need to see some public pressure to change their software.
Much like Intelliquent/Onvoy, etc. know that their networks are being used for nefarious purposes, yet those bastards do nothing.
I am bumping this due to me just adding another website to the list!
Ok, updated the post again with a couple more domains.
nsworld.live fake PayPal scumbags targeting the Brits
Updated the post with additional websites.
Yeah that’s fine, just make sure to update the last updated section of the post to please.
they should make a blocklist for adguard and ublock origin for these domains.
Updated with new domains.
EDIT: Added 3 more.
from the vid that SR uploaded to YouTube today, we have https://matry.top/guest.aspx
the front page disguises itself as a wedding page template stolen from Tooplate
another site is phelp.online