Active ScreenConnect attacks breach MSPs, impact dozens of organizations

ConnectWise is investigating an active malware campaign targeting managed service providers (MSPs) that exploits compromised ScreenConnect environments to deploy rogue remote-access clients to customer devices. The attacks have impacted dozens of organizations, prompting the company to urge MSPs to audit their ScreenConnect instances and review access logs for signs of unauthorized activity.