Active ScreenConnect attacks breach MSPs, impact dozens of organizations

ConnectWise is investigating an active malware campaign targeting managed service providers (MSPs). The attackers are using compromised ScreenConnect environments to deploy unauthorized remote-access clients to customer devices. Huntress reported six compromised MSPs and more than 286 affected endpoints across 47 organizations, with the number of victims increasing.