ConnectWise (SkyKick) Vendor Credentials Abused in M365 Attacks
ConnectWise (SkyKick) vendor credentials are being abused to access Microsoft 365 tenants. Disable the apps now and check your logs here.
- Vendor
- Microsoft, ConnectWise
- Product
- Microsoft 365 / Office, ScreenConnect / Automate
- Exploitation
- observed in the wild
- Exposure class
- Collaboration, Remote access
Why it ranks 45 (High)
- Exploitation observed in the wild
- Exposed product class: remote access
- Widely deployed vendor product (Microsoft)
- Threat research
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- Huntress (huntress.com)