ConnectWise exploits used by more threat groups

Vulnerable ScreenConnect servers infiltrated by Black Basta have been leveraged by the ransomware gang to facilitate reconnaissance, privilege escalation, and Cobalt Strike payload distribution, according to a reports.

basta black basta cobalt cobalt strike connectwise distribution escalation exploits gang network security payload privilege privilege escalation ransomware ransomware gang reconnaissance reports screenconnect servers strike threat threat groups vulnerable