Hackers Use Compromised ConnectWise Credential to Sign In to 173 Microsoft 365 Tenants

Unknown threat actors are abusing a compromised Microsoft 365 credential belonging to ConnectWise Cloud Backup, formerly SkyKick, to sign in to 173 customer tenants. The active campaign targets managed service providers, gaining unauthorized access to their M365 environments. Researchers warn that the breach could lead to data theft or ransomware deployment across multiple organizations.