Active ScreenConnect attacks breach MSPs and impact dozens of organizations

An active malware campaign is targeting managed service providers (MSPs) using compromised ScreenConnect environments. Threat actors are leveraging this access to deploy rogue remote-access clients onto customer endpoints, impacting dozens of organizations. ConnectWise is actively investigating the ongoing campaign.