ConnectWise

MITRE
Malware Type:
Tool
First seen:
Unknown
Last seen:
Unknown
Details:

[ConnectWise](https://attack.mitre.org/software/S0591) is a legitimate remote administration tool that has been used since at least 2016 by threat actors including [MuddyWater](https://attack.mitre.org/groups/G0069) and [GOLD SOUTHFIELD](https://attack.mitre.org/groups/G0115) to connect to and conduct lateral movement in target environments.(Citation: Anomali Static Kitten February 2021)(Citation: Trend Micro Muddy Water March 2021)

Associated Techniques (3)
ID ATT&CK Tactics
T1059.001 PowerShell -
T1113 Screen Capture -
T1125 Video Capture -
Aliases (105)
ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect ScreenConnect
Used by Actors (3)
GOLD SOUTHFIELD
Unknown
MuddyWater
Nation-state
Scattered Spider
Unknown
Metadata
ID: 741
Created: 13/01/2026 17:48
Updated: 06/03/2026 16:00