ScreenConnect Attacks Target at Least 288 Endpoints Across 48 Organizations With Rogue Clients

ConnectWise has disabled five third-party extensions as a precaution after reports of unauthorized access to ScreenConnect. The company found no evidence that its infrastructure was compromised or that a vulnerability in the ScreenConnect software was exploited. An incident involving unauthorized access has occurred, with the initial assessment suggesting that the activity may involve rogue clients. At least 288 endpoints across 48 organizations have been targeted in these attacks. The cause of the incident is still being investigated. ConnectWise's advisory indicates that the company is taking steps to address the issue.