ConnectUnwise: Threat actors abuse ConnectWise as builder for signed malware

Author(s): Karsten Hahn, Lance Go
Organization: Gdata

Open article directly

2025-05-16 ⋅ Gdata ⋅ Karsten Hahn
Printer company provided infected software downloads for half a year
SnipVex

2025-05-13 ⋅ Gdata ⋅ Chloe de Leon, Lovely Antonio
Sit, Fetch, Steal - Chihuahua Stealer: A new Breed of Infostealer
Chihuahua

2025-01-27 ⋅ Youtube (MalwareAnalysisForHedgehogs) ⋅ Karsten Hahn
Malware Analysis - Binary Refinery URL extraction of Multi-Layered PoshLoader for LummaStealer
Lumma Stealer

Propose Change ConnectUnwise: Threat actors abuse ConnectWise as builder for signed malware