ConnectUnwise: Threat actors abuse ConnectWise as builder for signed malware

Author(s): Karsten Hahn, Lance Go
Organization: Gdata

Open article directly

2026-03-12 ⋅ Gdata ⋅ John Dador
Endgame Harvesting: Inside ACRStealer’s Modern Infrastructure
ACR Stealer

2026-02-26 ⋅ Gdata ⋅ John Dador, Karsten Hahn
HijackLoader: Free Games, Costly Consequences
HijackLoader

2025-08-28 ⋅ Gdata ⋅ Karsten Hahn, Louis Sorita
AppSuite PDF Editor Backdoor: A Detailed Technical Analysis
TamperedChef

Propose Change ConnectUnwise: Threat actors abuse ConnectWise as builder for signed malware