Hackers used compromised ConnectWise credential to access 173 Microsoft 365 tenants

Unknown threat actors are abusing a compromised ConnectWise Cloud Backup (formerly SkyKick) credential to gain unauthorized access to customers' Microsoft 365 environments. The campaign has affected 173 M365 tenants, with the service used by managed service providers for cloud backup.

• Compromised ConnectWise Cloud Backup (SkyKick) credential abused
• Attack impacted 173 Microsoft 365 tenants
• Actors gained unauthorized access to customer M365 environments
• Service is used by MSPs for cloud backup and recovery