#connectwise — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #connectwise, aggregated by home.social.
-
ScreenConnect RMM Abuse, Cloudflare Tunnels, and Trusted Software Lures Threat Intelligence, Threat Research, Threat Security
Threat actors are conducting a multi-wave campaign using social engineering lures themed around Zoom updates, business documents, and system utilities to deploy ScreenConnect Remote Monitoring and Management agents. The operation employs VBScript droppers, batch loaders, compiled .NET executables, and HTML phishing pages, all retrieving payloads from a WsgiDAV staging server at 207.174.0.143:8080. Victims receive silently installed ScreenConnect agents that beacon to three attacker-controlled relay servers, providing persistent remote access. The campaign demonstrates technical evolution from obfuscated VBScript with XOR encryption to aggressive .NET loaders executing nine-step Windows Defender destruction sequences. Cross-platform variants target both Windows and macOS systems. All payloads are legitimately signed ConnectWise ScreenConnect MSIs, designed to evade security controls that trust code signing. The threat actor actively rotates payload hashes and recently pivoted to stealth tactics specifically...
Pulse ID: 6a722d8bdafe1dfae681f87b
Pulse Link: https://otx.alienvault.com/pulse/6a722d8bdafe1dfae681f87b
Pulse Author: AlienVault
Created: 2026-08-04 18:20:59Be advised, this data is unverified and should be considered preliminary. Always do further verification.
#Cloud #ConnectWise #CyberSecurity #Encryption #HTML #ICS #InfoSec #Mac #MacOS #NET #OTX #OpenThreatExchange #Phishing #RAT #Rust #ScreenConnect #SocialEngineering #Troll #VBS #Windows #Zoom #bot #AlienVault
-
#CISA-Warnung: Angriffe auf #ConnectWise #ScreenConnect und #WindowsShell | Security https://www.heise.de/news/CISA-Warnung-Angriffe-auf-ConnectWise-ScreenConnect-und-Windows-Shell-11276026.html #exploit #Patchday
-
CVE Alert: CVE-2024-1708 - ConnectWise - ScreenConnect - https://www.redpacketsecurity.com/cve-alert-cve-2024-1708-connectwise-screenconnect/
#OSINT #ThreatIntel #CyberSecurity #cve-2024-1708 #connectwise #screenconnect
-
#ConnectWise #ScreenConnect schließt kritische Zugriffslücke | Security https://www.heise.de/news/ConnectWise-ScreenConnect-schliesst-kritische-Zugriffsluecke-11217173.html #Patchday
-
Fernwartung #ScreenConnect: Kritische Lücke ermöglicht Schadcodeausführung | Security https://www.heise.de/news/Fernwartung-ScreenConnect-Kritische-Luecke-ermoeglicht-Schadcodeausfuehrung-11112865.html #ConnectWise #Patchday
-
ConnectWise Patches Critical Flaw in Automate RMM Tool https://www.securityweek.com/connectwise-patches-critical-flaw-in-automate-rmm-tool/ #Vulnerabilities #vulnerability #ConnectWise #Patch #MitM
-
Imagine a trusted IT tool letting hackers intercept crucial data and swap out updates like tampered packages. What does this mean for the safety of your systems? Dive into the story behind ConnectWise Automate’s vulnerabilities and the rising threat in RMM security.
#connectwise
#rmmsecurity
#supplychainattack
#cybersecurity2025
#aitmattacks -
Hackers Abuse ConnectWise to Hide Malware https://www.securityweek.com/hackers-abuse-connectwise-to-hide-malware/ #Malware&Threats #ConnectWise #malware
-
Hackers Abuse ConnectWise to Hide Malware https://www.securityweek.com/hackers-abuse-connectwise-to-hide-malware/ #Malware&Threats #ConnectWise #malware
-
ConnectWise to Rotate ScreenConnect Code Signing Certificates Due to Security Risks
#ConnectWise
https://thehackernews.com/2025/06/connectwise-to-rotate-screenconnect.html -
ConnectWise to Rotate Code-Signing Certificates – Source: www.darkreading.com https://ciso2ciso.com/connectwise-to-rotate-code-signing-certificates-source-www-darkreading-com/ #rssfeedpostgeneratorecho #DarkReadingSecurity #CyberSecurityNews #ConnectWise #DARKReading
-
Connectwise is rotating code signing certificates. What happened? https://www.helpnetsecurity.com/2025/06/11/connectwise-is-rotating-code-signing-certificates-what-happened/ #securityupdate #certificates #ConnectWise #CyberProof #Don'tmiss #Hotstuff #News #LUMU
-
ConnectWise is rotating code signing certificates. What happened?
-
What a wonderful thing to find out while on vacation that my phone is blowing up because a news article about #ConnectWise published yesterday (https://www.bleepingcomputer.com/news/security/connectwise-rotating-code-signing-certificates-over-security-concerns/) referenced something I posted here in April (https://infosec.exchange/@threatresearch/114315246724920453). (Thanks, Bill ❤️ & @BleepingComputer)
-
#ConnectWise is changing server certificates on June 10, 2025, client updates required, although some updates still not ready.
-
Nutzt wer #ConnectWise Produkte? Die wechseln die Zertifikate zum 10.6.2025, also updaten (wobei die Produkte noch nicht alle aktuell sind).
-
Angriffe laufen: #Connectwise, #CraftCMS und #Asus-Router im Visier | Security https://www.heise.de/news/Warnung-vor-Angriffen-auf-Connectwise-Craft-CMS-und-Asus-Router-10424978.html #Patchday
-
IT-Vorfall bei #Connectwise: Staatliche Cyberkriminelle eingebrochen | Security https://www.heise.de/news/IT-Vorfall-bei-Connectwise-Staatliche-Cyberkriminelle-eingebrochen-10425193.html #CyberCrime
-
Attackers breached ConnectWise, compromised customer ScreenConnect instances https://www.helpnetsecurity.com/2025/06/02/attackers-breached-connectwise-compromised-customer-screenconnect-instances/ #government-backedattacks #cyberespionage #remoteaccess #ConnectWise #techsupport #Don'tmiss #Hotstuff #News #MSP
-
ConnectWise Breached, ScreenConnect Customers Targeted – Source: www.darkreading.com https://ciso2ciso.com/connectwise-breached-screenconnect-customers-targeted-source-www-darkreading-com/ #rssfeedpostgeneratorecho #DarkReadingSecurity #CyberSecurityNews #ConnectWise #DARKReading
-
ConnectWise customers get mysterious warning about ‘sophisticated’ nation-state hack – Source: go.theregister.com https://ciso2ciso.com/connectwise-customers-get-mysterious-warning-about-sophisticated-nation-state-hack-source-go-theregister-com/ #rssfeedpostgeneratorecho #TheRegisterSecurity #CyberSecurityNews #ConnectWise #TheRegister
-
ConnectWise suffered a cyberattack carried out by a sophisticated nation state actor – Source: securityaffairs.com https://ciso2ciso.com/connectwise-suffered-a-cyberattack-carried-out-by-a-sophisticated-nation-state-actor-source-securityaffairs-com/ #ConnectWiseScreenConnect #rssfeedpostgeneratorecho #informationsecuritynews #ITInformationSecurity #SecurityAffairscom #CyberSecurityNews #PierluigiPaganini #SecurityAffairs #SecurityAffairs #BreakingNews #SecurityNews #ConnectWise #hackingnews
-
ConnectWise says nation-state attack targeted multiple ScreenConnect customers
#ConnectWise #CVE_2024_1709
https://therecord.media/connectwise-nation-state-attack-targeted-some-customers -
ConnectWise Hit by Cyberattack; Nation-State Actor Suspected in Targeted Breach – Source:thehackernews.com https://ciso2ciso.com/connectwise-hit-by-cyberattack-nation-state-actor-suspected-in-targeted-breach-sourcethehackernews-com/ #rssfeedpostgeneratorecho #CyberSecurityNews #TheHackerNews #ConnectWise
-
ConnectWise Confirms Hack, “Very Small Number” of Customers Affected – Source: www.infosecurity-magazine.com https://ciso2ciso.com/connectwise-confirms-hack-very-small-number-of-customers-affected-source-www-infosecurity-magazine-com/ #rssfeedpostgeneratorecho #InfoSecurityMagazine #InfosecurityMagazine #CyberSecurityNews #ConnectWise
-
ConnectWise ScreenConnect Tops List of Abused RATs in 2025 Attacks https://hackread.com/connectwise-screenconnect-tops-abused-rats-2025/ #Cybersecurity #ScreenConnect #ConnectWise #FleetDeck #Security #Malware #TROJAN #RAT
-
ConnectWise ScreenConnect Tops List of Abused RATs in 2025 Attacks – Source:hackread.com https://ciso2ciso.com/connectwise-screenconnect-tops-list-of-abused-rats-in-2025-attacks-sourcehackread-com/ #1CyberSecurityNewsPost #CyberSecurityNews #cybersecurity #ScreenConnect #ConnectWise #FleetDeck #Hackread #security #malware #trojan #RAT