Unauthorized Access to 173 Microsoft 365 Tenants via Compromised ConnectWise Credentials

Cybersecurity researchers report an active campaign where threat actors exploited a compromised Microsoft 365 credential from ConnectWise Cloud Backup to unauthorized access 173 M365 environments. The breach affects managed service providers (MSPs) and their customers, highlighting vulnerabilities in third-party service credentials.

Cybersecurity researchers are sounding the alarm related to an active campaign in which unknown threat actors are abusing a compromised Microsoft 365 (M365) credential belonging to ConnectWise Cloud Backup (formerly SkyKick) to gain unauthorized access to customers' M365 environments.

ConnectWise Cloud Backup is a cloud-based backup and recovery service built for managed service providers (MSPs

Read original article