A friend sends an invitation, it is the holidays, and you click without a second thought.

Of course you do. That is exactly what this scam counts on. Nobody expects a party invitation to be dangerous, which is why it works. Here is how it works, how to spot it, and what to do if you already opened it.

What is the fake party invitation scam?

Security researchers described it in February 2026. You get an email that looks like a personal invitation, sometimes from a friend whose email account was hacked. The link opens a polished page with a big “You’re Invited!” headline. Instead of showing you an event, the page starts downloading a file.

That file is not an invitation. It is an installer. It quietly installs ScreenConnect, a real remote support program that IT teams use every day. Once it is on your computer, the person behind the scam can see your screen, use your mouse and keyboard, and move files back and forth, even after you restart.

The researchers said the campaign they described was aimed at people in the UK, but nothing stops it from spreading.

Why does it work so well?

Opening an invitation feels passive, like glancing at a flyer. Most of us watch for warnings and pressure, and a friendly invite triggers neither. By the time something feels off, the program is already installed.

How can I tell a fake invitation from a real one?

A real invitation shows you the event. A fake one pushes you toward a file. These are the signs the researchers described:

• A download starts on its own, or the page tells you to open a file to see the invitation.

• The page says the invitation is best viewed on a Windows laptop or desktop.

• A countdown says your invitation is already downloading.

• Pressure and cheerful proof, like a note saying someone opened theirs and it was easy.

• It seems to come from a friend, but something feels off. Their email account may have been hacked.

One rule covers all of it: no real invitation needs you to install anything. If one asks you to run a file, close it. Then check with the sender by text or phone, using a number you already have.

What are the signs someone is controlling my computer?

The researchers named three that you can see yourself: the mouse moving on its own, windows opening by themselves, or a remote support program you do not remember installing.

What if I already opened the file?

First, this is not your fault. These emails are made to look like they come from someone you trust. Do these in order:

1. Disconnect from the internet. Turn off Wi-Fi or unplug the network cable.

2. Look for ScreenConnect. On Windows 11, open Settings, then Apps, then Installed apps, and look for ScreenConnect Client. It may have random letters and numbers after the name.

3. Before you remove it, ask whether you or your IT provider installed it on purpose. If so, leave it and ask first. If not, uninstall it.

4. Run a full scan with your security software.

5. From a different device, change your important passwords, starting with your email.

6. If you are not sure, or the program will not go away, leave the computer offline and ask for help before you use it again.

Does this affect Macs and phones?

The file in the campaign the researchers described was a Windows installer, and the page said it was made for Windows laptops and desktops. That does not make other devices safe from other tricks. The habit protects everything: never install something because an invitation told you to.

How does a real remote session work?

Remote support tools are not bad. IT teams use them every day, including us when it helps. The difference is permission. A remote session with ITComp is always scheduled ahead of time, you are there in front of the screen, and it never starts out of the blue. If someone you did not call asks to take control of your computer, that is not us.

How do I stay safe this holiday season?

• Never open or run a file from an unexpected invitation.

• Check with the sender by text or phone before you click.

• On a computer, hover over a link to see where it really goes. On a phone, press and hold it.

• Keep Windows and your security software up to date.

• If a friend’s message feels off, tell them. Their account may have been hacked.

If a pop-up or a call told you to phone a number, read That Pop-Up Says Your Computer Is Infected. If you think something already got in, read How to Know If Your Computer Has a Virus. For the bigger picture, read Becoming Aware of Cyber Threats.

If you are not sure what you opened, you do not have to sort it out alone. We help businesses and homes across Southwest Florida.