Hackers access 173 Microsoft 365 tenants using stolen ConnectWise credential

Attackers used a compromised credential for ConnectWise Cloud Backup to enter customer environments through a trusted backup application. Cyber Security News puts the number of affected partner and customer tenants at 173. ConnectWise shut down customer access to the backup service after the breach, according to BleepingComputer.

• ConnectWise Cloud Backup was formerly called SkyKick.
• The service provides cloud backup and recovery for managed service providers, according to The Hacker News.

Covered by 3 publishers within 9 hours of the first report.

• The Hacker News: Hackers Use Compromised ConnectWise Credential to Sign In to 173 Microsoft 365 Tenants

Reporting3

THN The Hacker News Hackers Use Compromised ConnectWise Credential to Sign In to 173 Microsoft 365 Tenants · info@thehackernews.com (The Hacker News) 2:16 AM

CSN Cyber Security News Hackers used Compromised ConnectWise Backup Credentials to Hack 173 Microsoft 365 Accounts · Guru Baran 6:52 AM

BC BleepingComputer Hackers breach Microsoft 365 tenants via ConnectWise supply-chain attack · Ionut Ilascu 11:18 AM

Related

BC Nikkei says attackers breached employee email accounts October 5

G OpenAI and other AI firms face questions at Australian inquiry October 5

BC ASOS ties customer data breach to stolen credentials October 8

SW Hackers access 400,000 Georgia Power and Alabama Power accounts October 6

Topics MicrosoftData breaches