Vulnerable ScreenConnect servers infiltrated by Black Basta have been leveraged by the ransomware gang to facilitate reconnaissance, privilege escalation, and Cobalt Strike payload distribution, according to a reports.
Article Link: ConnectWise exploits used by more threat groups | SC Media