SME CYBER INSIGHTS: Tuesday 25 March 2025 – Today’s SME Cybersecurity News & Intel

2). CURRENT THEAT INTEL: LinkedIn Phishing Scam Delivers ConnectWise RAT using fake LinkedIn InMail notifications. A newly discovered phishing campaign is using fake LinkedIn InMail notifications to distribute the ConnectWise Remote Access Trojan (RAT), according to Cybersecurity intelligence firm Cofense. Unlike traditional LinkedIn phishing scams that aim to steal login credentials, this attack delivers malware directly to the victim’s device. The fraudulent emails, which claim to be from a sales director requesting a quote, closely mimic LinkedIn’s branding. However, they use an outdated InMail template from before LinkedIn’s 2020 UI refresh—making them particularly convincing for long-time users. Clicking on the embedded “Read More” or “Reply To” buttons triggers the download of the ConnectWise RAT installer …