Hackers Exploit Compromised ConnectWise Credential to Access 173 Microsoft 365 Tenants

Cybersecurity researchers have issued an alert regarding an active campaign where threat actors are using a compromised Microsoft 365 credential belonging to ConnectWise Cloud Backup (formerly SkyKick) to gain unauthorized access to 173 customer Microsoft 365 environments. The compromised credential grants broad access to mailboxes, OneDrive, SharePoint, Teams, and directory data.