ConnectWise
Alias-Namen: ScreenConnect
65
59
28.04.2026
22.10.2026
Profil laut MITRE ATT&CK
ConnectWise is a legitimate remote administration tool that has been used since at least 2016 by threat actors including MuddyWater and GOLD SOUTHFIELD to connect to and conduct lateral movement in target environments.
Vollständiges MITRE-ProfilBeschreibung und Alias-Namen stammen aus MITRE ATT&CK®.
Nennungen im Zeitverlauf
Meldungen je Monat, letzte 12 Monate.
Beobachtete Techniken
ATT&CK-Techniken, die in denselben Meldungen benannt sind — nicht das vollständige MITRE-Repertoire.
MITRE ordnet 3 Techniken zu; 0 davon kommen in unseren Meldungen vor. Markiert: auch laut MITRE bekannt.
T1566 Phishing
Initial Access
T1684 Social Engineering
stealth
T1110.003 Password Spraying
Credential Access
T1195 Supply Chain Compromise
Initial Access
T1505.003 Web Shell
Persistence
T1053.005 Scheduled Task
Execution · Persistence · Privilege Escalation
T1583.008 Malvertising
Resource Development
T1003.001 LSASS Memory
Credential Access
T1021 Remote Services
Lateral Movement
T1055 Process Injection
Privilege Escalation · stealth
T1055.012 Process Hollowing
Privilege Escalation · stealth
T1219 Remote Access Tools
Command & Control
Schwachstellen im selben Kontext
CVEs, die in denselben Meldungen auftauchen. Ko-Okkurrenz, kein Nachweis einer Ausnutzung.
Gemeinsam genannt
Betroffene Branchen
Meldungen
Microsoft blames ConnectWise attacks on Chinese state hacker using ARTEX AI agents
China-Linked Hackers Use ARTEX AI Agents in ConnectWise Supply Chain Attack
Lieferkettenangriff auf Backup-Dienst trifft Hunderte M365-Tenants
Chinese AI Model Writes More Hackable Code When Told It’s for US Contractor
AOMEI Backupper Compromised in Short-Burst Supply Chain Campaign
Ex-OpenAI Worker Accused of Bugging Conference Room Planned to Fly to Saudi Arabia, Prosecutors Say
#StopRansomware: SafePay Ransomware
ConnectWise Resets Credentials as Cloud Backup Remains Offline After Security Incident
ConnectWise suspends Cloud Backup service after supply chain attack
Siemens Software Center Vulnerability Exploited in ClickFix Malware Attacks
⚡ Weekly Recap: 98 Zero-Days, Rogue AI Agents, $100M Crypto Theft, 700 Supermarkets Hit and More
ConnectWise Suspends Cloud Services in Response to Cyberattack
ConnectWise Cloud Backup application abused in cross-tenant token sweep
ConnectWise Suspends Cloud Backup After Attackers Compromise Microsoft 365 Tenants
ConnectWise SkyKick Breach: How to Check Your Microsoft 365 Tenant
Hackers breach Microsoft 365 tenants via ConnectWise supply-chain attack
Hackers Use Compromised ConnectWise Credential to Sign In to 173 Microsoft 365 Tenants
ThreatsDay: Ransomware Affiliate Betrayal, WhatsApp RAT, Exposed Hacker Tools and 12 More Stories
The Fine Art of Frustrating the Adversary
Attackers Abuse MSP360 to Deploy ScreenConnect in Dual-RMM Phishing Attacks
US-Focused CSuite Phishing Steals Microsoft 365 Sessions and Deploys RMM Tools for Remote Access
Critical ScreenConnect flaw now actively exploited in attacks
Acronis Patches Exploited Vulnerability in cPanel Backup Plugin
Hacked HBO Max Reddit Account Used for Malware Delivery via ClickFix Attack
Root RCE Zero-Day in Cisco Secure Email Gateway Under Active Exploitation
Beijing Hits Back at Anthropic CEO’s Call to Curb China’s AI Development
New Warnings About the Risks of AI to Humanity Revive a Long-Running Debate
The Race to Control AI and Protect What Makes Us Human
CISOs Race to Control AI Agents Without Destroying Their Value
ConnectWise Patches ScreenConnect Vulnerability Exploited in Worm-Like Attacks
Quellen: SecurityWeek (21), The Hacker News (19), BleepingComputer (7), heise Security (3), The Record (2), CISA Current Activity (2), Dark Reading (2), Industrial Cyber (2)
Alle Angaben auf dieser Seite stammen aus dem Alias-Abgleich der Meldungstexte gegen den MITRE-ATT&CK-Katalog. Beziehungen entstehen rein statistisch: Zwei Einträge gelten als verbunden, wenn sie in derselben Meldung benannt sind. Das ist keine eigenständige Attribution durch SecBoard, und eine Nennung ist kein Nachweis einer Täterschaft. Ausnahme ist der Abschnitt „Belegte Beziehungen“: dort sagt die Meldung die Beziehung ausdrücklich, mit Zitat.