ConnectWise disables 5 ScreenConnect add-ons after worm-like remote-access campaign

ConnectWise disabled five third-party ScreenConnect extensions across ~400 partner environments after researchers linked a worm-like toolkit to one add-on. The campaign exploited a trusted channel to spread remote-access malware, indicating supply-chain compromise of the managed-service provider ecosystem. Scope and attribution remain unclear; the takedown is reactive, and residual risk persists for affected partners.

AI disclosure: Model-written summary of the source, not a verified fact. Check the sources. How Mosaic works