Hackers build fake desktop apps to trick victims into handing over access

(Image credit: Getty Images)

Threat actors spoofed major US HR/payroll platforms with fake desktop clients built via Lovable landing pages

Victims downloaded a modified ScreenConnect build from GitHub, giving attackers hidden, unattended remote access

Campaign shows ~291 downloads; likely targets payroll staff, enabling potential wire fraud through diverted payments

Cybercriminals are impersonating large American HR and payroll platforms in attacks that are very difficult to spot, new research from Allure has claimed.

Its report revealed how the as-yet unidentified threat…