News Qilin affiliates spear-phish MSP ScreenConnect admin, targeting customers downs

Attack matches three-year long pattern of ScreenConnect attacks tracked by Sophos MDR as STAC4365.





https://news.sophos.com/en-us/2025/04/01...enconnect/