Posts Tagged ‘ConnectWise’
ConnectWise Supply Chain Attack Hits Microsoft 365
The ConnectWise supply chain attack now has a name behind it. Microsoft assesses that the China state-aligned group Storm-0940 used stolen credentials of ConnectWise cloud applications to sign in to customer Microsoft 365 tenants, with AI agents doing the work. Disabling the ConnectWise connection may not be enough, because the attackers could have added credentials…
Read MoreConnectWise Cloud Backup Incident and Microsoft 365
In mid-October, Huntress and Microsoft reported that attackers had abused a compromised vendor-side credential associated with ConnectWise Cloud Backup (formerly SkyKick) to sign in to customers’ Microsoft 365 tenants. ConnectWise confirmed unauthorized access to its Cloud Backup application identities and took containment measures. Many managed service providers (MSPs) use Cloud Backup to copy their clients’…
Read More