Active ScreenConnect attacks breach MSPs, deploy rogue remote-access clients

ConnectWise is investigating an active malware campaign that exploits compromised ScreenConnect environments to push rogue remote-access clients to MSP customer devices. The attack targets managed service providers, potentially enabling broad downstream compromise. Scope and attribution remain unclear, but the supply-chain vector elevates risk for MSP clients.

AI disclosure: Model-written summary of the source, not a verified fact. Check the sources. How Mosaic works