Fake Zoom installers are a signed MSP360 agent that quietly pulls ScreenConnect as a backup backdoor. https://intel.threadlinqs.com/threat/TL-2026-3526 #ThreatIntel #SupportScamWin32 #MSP360 #ConnectWise
@threadlinqs.bsky.social
@threadlinqs.bsky.socialFake Zoom installers are a signed MSP360 agent that quietly pulls ScreenConnect as a backup backdoor. https://intel.threadlinqs.com/threat/TL-2026-3526 #ThreatIntel #SupportScamWin32 #MSP360 #ConnectWise
@threadlinqs.bsky.socialA vague party invite, a fake CAPTCHA, and one click hands attackers ScreenConnect remote access. https://intel.threadlinqs.com/threat/TL-2026-3415 #ThreatIntel #ConnectWise #ScreenConnect #Phishing
@pingoru.bsky.social⚠️ ConnectWise is reporting a Incident since 11:04 UTC
"x360Sync Partial Outage in SLC"
Affects: x360Sync, North America
Live timeline → https://pingoru.io/providers/connectwise/incidents/12273569
@pingoru.bsky.social⚠️ ConnectWise is reporting a Incident since 23:22 UTC
"Delays or problems creating HelpDesk and NOC tickets"
Affects: Help Desk Services, NOC Services, North America
Live timeline → https://pingoru.io/providers/connectwise/incidents/12272668
@pingoru.bsky.social⚠️ ConnectWise is reporting a Incident since 10:49 UTC
"WisePay/WiseSync Issue with Xero"
Affects: WisePay, Wise-Sync, All Regions
Live timeline → https://pingoru.io/providers/connectwise/incidents/12271227
@pingoru.bsky.social⚠️ ConnectWise is reporting a Incident since 15:46 UTC
"Workflow Execution Delays"
Affects: CW Platform, North America
Live timeline → https://pingoru.io/providers/connectwise/incidents/12245021
@pingoru.bsky.social⚠️ ConnectWise is reporting a Incident since 10:39 UTC
"Investigating - [Product] [Description]"
Affects: WisePay, Wise-Sync, All Regions
Live timeline → https://pingoru.io/providers/connectwise/incidents/12189693
@pingoru.bsky.social⚠️ ConnectWise is reporting a Incident since 22:31 UTC
"Investigating - WisePay - Duplicate ACH debits"
Affects: WisePay, North America
Live timeline → https://pingoru.io/providers/connectwise/incidents/12187869
@threadlinqs.bsky.socialA legit Power BI page is the lure - then two rogue ScreenConnect clients quietly take over. https://intel.threadlinqs.com/threat/TL-2026-2998 #ThreatIntel #ConnectWise #HideUL #ScreenConnect
@pingoru.bsky.social⚠️ ConnectWise is reporting a Incident since 04:40 UTC
"Reports and Dashboards External Reports Not Sending"
Affects: Reports and Dashboards, EMEA, North America
Live timeline → https://pingoru.io/providers/connectwise/incidents/12186665
@pingoru.bsky.social⚠️ ConnectWise is reporting a Incident since 15:19 UTC
"Delay in Platform Ticketing to PSA"
Affects: PSA, North America
Live timeline → https://pingoru.io/providers/connectwise/incidents/12184579
@pingoru.bsky.social⚠️ ConnectWise is reporting a Incident since 12:27 UTC
"Investigating - WisePay / WiseSync Connectivity Issues with Xero"
Affects: WisePay, Wise-Sync, All Regions
Live timeline → https://pingoru.io/providers/connectwise/incidents/12184346
@threadlinqs.bsky.socialA validly signed ScreenConnect installer, posing as a PDF, hands attackers remote access. No malware needed. https://intel.threadlinqs.com/threat/TL-2026-2931 #ThreatIntel #ConnectWise #ScreenConnect #WireTransferPhish
@hacks.grA fake payment email linked to genuine ScreenConnect software, configured to connect to an account controlled by the senders.
The software was real; th…
@hacks.grA fake $5,745.65 payment email promised a PDF but downloaded ConnectWise ScreenConnect instead.
If inst…
@cyberveille-ch.bsky.social📢 CVE-2026-84869 : vulnérabilité critique dans ScreenConnect exploitée activement
Cet article analyse la vulnérabilité CVE-2026-84869 affectant ConnectWise ScreenConnect, un outil de gestion à distance largement utilisé…
🟡 vérification factuelle moyenne
#ScreenConnect #ConnectWise #Cyberveille
@threadlinqs.bsky.socialA validly signed ScreenConnect installer is the payload - no malware needed, just a rigged config. https://intel.threadlinqs.com/threat/TL-2026-2826 #ThreatIntel #ScreenConnect #ConnectWise #Mejuri
@pingoru.bsky.social🟠 ConnectWise is reporting a Partial Outage since 11:35 UTC
"Investigating - ScreenConnect Cloud Instances Not Loading"
Affects: ScreenConnect, North America
Live timeline → https://pingoru.io/providers/connectwise/incidents/12104354
@intelfusions.comPhishing emails are tricking staff into installing genuine IT remote-management software, which attackers then use to add a second remote-control tool and steal credentials. Microsoft has published hunting queries and blocking advice.
@threadlinqs.bsky.socialSigned RMM tools as malware: phishing installs MSP360, then silently adds ScreenConnect. https://intel.threadlinqs.com/threat/TL-2026-2788 #ThreatIntel #MSP360 #ConnectWise #ScreenConnect
