Hackers Use Compromised ConnectWise Credential to Sign In to 173 Microsoft 365 Tenants

Threat actors are abusing a compromised Microsoft 365 credential belonging to ConnectWise Cloud Backup, formerly SkyKick, to gain unauthorized access to customers' Microsoft 365 environments, according to researchers. The backup service is built for managed service providers, and the campaign has been used to sign in to 173 Microsoft 365 tenants.