Attackers Abuse MSP360 to Deploy ScreenConnect in Dual

Billy Odell Tucker-Robinson Founder & Host — Banking With Billy Network • Financial Intelligence • Markets • World News • Independent Analysis
Published: 2026-09-30 • Permanent link

MSP360, a cloud-based remote monitoring and management (RMM) platform, has been exploited by attackers to deploy ScreenConnect, a remote desktop access tool. According to reports, the attackers have used MSP360 to gain unauthorized access to users' systems, allowing them to remotely control and manipulate devices. This malicious activity has been detected in various industries, including healthcare and finance. The attacks have also been linked to a phishing campaign targeting MSP360 customers, with some users reporting receiving suspicious emails and notifications.

Financial markets have taken notice of the attacks, with some stocks in the cybersecurity sector experiencing fluctuations in value. Analysts have warned that the attacks highlight the growing threat of sophisticated phishing campaigns, which can be used to gain access to sensitive systems and data. As a result, investors are advised to exercise caution and monitor their accounts closely for any suspicious activity. The attacks have also raised concerns about the need for robust cybersecurity measures, particularly in industries where data protection is paramount.

Industry experts point to the rise of ScreenConnect as a prime example of the evolving threat landscape. The tool, which allows users to access and control remote systems, has been widely adopted in various industries. However, its widespread use has also made it a popular target for attackers. According to cybersecurity expert, Rachel Kim, "The use of ScreenConnect in malicious attacks highlights the need for organizations to implement robust security measures, including multi-factor authentication and regular software updates.

As the attacks continue to unfold, experts warn that MSP360 customers should remain vigilant and take immediate action to protect their systems. The company has issued a statement assuring customers that it is working to resolve the issue and prevent future attacks. In the meantime, customers are advised to monitor their systems closely and report any suspicious activity to MSP360's support team.