ScreenConnect Attacks Target at Least 288 Endpoints Across 48 Organizations With Rogue Clients

Attackers have used cloud-hosted ScreenConnect panels to install rogue clients on hundreds of managed endpoints, targeting at least 288 endpoints across 48 organizations. ConnectWise has disabled five third-party extensions in partner environments following reports of unauthorized access. The company said there is no evidence the activity involves a compromise of its infrastructure or a vulnerability in the ScreenConnect software.