Connectwise integration with 3CX

[BrenttG]

I have a feeling today that a lot of people are glad 3CX does not integrate full mgt wise with connectwise. Since they had a massive breach over the weekend, if you havent heard about it look it up, foreign actors are using backdoor access to push ransomware into clients systems using the MSPs own RMM software that was breached. Lookup the Cognizant breach if you dare.

https://www.bleepingcomputer.com/ne...gnizant-suffers-maze-ransomware-cyber-attack/

Always nice to know your vendor has system security so well at hand and under control

 

[diamond9]

How are they linked to connectwise? to be honest its not the first time connectwise has been ransomware, a year or so ago connectwise Mange went down and after numerous phonecalls it transpired that a unsecure computer used for testing that was plugged into the database cluster got infected and took down the whole of the EU databases

 

[BrenttG]

i dont know the nitty gritty, but per a source i spoke to who works at a company that uses connectwise, connectwise has some tie togeather with cognizant, and the breach was able to transcend them both, and then attackers were able to deploy malware to the systems of client companies and their customers systems as well.

 

[SteveITS]

In general with MSP hacks, it is far more likely the RMM software would be used to roll out the malware. In the simplistic case, the hacker can log in to the RMM tool and access client computers.

An RMM tool would be ConnectWise Automate, not ConnectWise Manage. The linked article doesn't mention ConnectWise at all though. 3CX can integrate with Manage to look up contacts. Years ago the software was named just ConnectWise and they branded it Manage after they bought LabTech (Automate) and a few other companies like ScreenConnect (Control).