How fake party invitations are being used to install remote access tools

This Malwarebytes report describes a social-engineering campaign targeting users (so far in the UK) where a deceptive “You’re invited” email and landing page automatically deliver an MSI (RSVPPartyInvitationCard.msi) that silently installs the legitimate ScreenConnect remote-access client, giving attackers persistent remote control; the report provides observed indicators (filename, ScreenConnect service with random suffix, xnyr.digital domain), behavioral signs, and mitigation steps for individuals and organizations.