ConnectWise
ScreenConnect
[ConnectWise](https://attack.mitre.org/software/S0591) is a legitimate remote administration tool that has been used since at least 2016 by threat actors including [MuddyWater](https://attack.mitre.org/groups/G0069) and [GOLD SOUTHFIELD](https://attack.mitre.org/groups/G0115) to connect to and conduct lateral movement in target environments.(Citation: Anomali Static Kitten February… Fuente: MITRE ATT&CK
Actividad en Jábega · 12 semanas
9 noticias · vista por primera vez el 30 sept 2026 · la última, el 19 oct 2026
Noticias
- ConnectWise suspends Cloud Backup service after supply chain attackThe Record · 19 oct 2026
- ConnectWise Disables Cloud Backups Amid Concerns for Downstream MSPsDark Reading · 19 oct 2026
- ConnectWise Suspends Cloud Services in Response to CyberattackSecurityWeek · 19 oct 2026
- ConnectWise Suspends Cloud Backup After Attackers Compromise Microsoft 365 TenantsThe Hacker News · 18 oct 2026
- Hackers breach Microsoft 365 tenants via ConnectWise supply-chain attackBleepingComputer · 17 oct 2026
- Hackers Use Compromised ConnectWise Credential to Sign In to 173 Microsoft 365 TenantsThe Hacker News · 17 oct 2026
- More RMM Tools In the Wild, (Tue, Oct 6th)SANS ISC · 6 oct 2026
- ScreenConnect Client (Ab)used by Attackers, (Thu, Oct 1st)SANS ISC · 1 oct 2026
- Attackers Abuse MSP360 to Deploy ScreenConnect in Dual-RMM Phishing AttacksThe Hacker News · 30 sept 2026
Técnicas MITRE ATT&CK
Ejecución
Recopilación
Relaciones por coaparición en noticias, no atribución. Fuentes: MISP galaxy, MITRE ATT&CK y SigmaHQ. attack.mitre.org ↗