AI, Scripts, Operator: Inside the ConnectWise Attack
Microsoft says an AI agent drove the ConnectWise attack. Huntress telemetry is consistent with that: scripted tooling, steered by an operator.
- Vendor
- Microsoft, ConnectWise
- Product
- ScreenConnect / Automate
- Exposure class
- Remote access
Why it ranks 16 (Routine)
- Exposed product class: remote access
- Threat research
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- Huntress (huntress.com)