Covered by 2 outlets — first reported by BleepingComputer, Nov 11, 22:56 UTC
Active ScreenConnect attacks breach MSPs, impact dozens of organizations
MentionsConnectWiseScreenConnect
In brief
ConnectWise has taken the precautionary step of disabling five third-party extensions in partner environments following reports of unauthorized access. In an advisory posted on its site, the company said there is no evidence that the incident involves a compromise of its infrastructure or a vulnerability in the ScreenConnect software. "Our initial assessment suggests the activity may involve
From The Hacker News's coverage.
Continue reading
2 outlets, in the order they reported it.
BleepingComputerFirst report
Active ScreenConnect attacks breach MSPs, impact dozens of organizations
ConnectWise is investigating an active malware campaign targeting managed service providers (MSPs) that uses compromised ScreenConnect environments to deploy rogue remote-access clients to customer devices.
The Hacker News
ScreenConnect Attacks Target at Least 288 Endpoints Across 48 Organizations With Rogue Clients
ConnectWise has taken the precautionary step of disabling five third-party extensions in partner environments following reports of unauthorized access.