# Hackers Use Compromised ConnectWise Credential to Sign In to 173 Microsoft 365 Tenants

**URL:** <https://forums.thehomestack.io/t/hackers-use-compromised-connectwise-credential-to-sign-in-to-173-microsoft-365-tenants/26464>\
**Category:** The Hacker News\
**Created:** [October 17, 2026, 6:59am UTC](https://forums.thehomestack.io/t/hackers-use-compromised-connectwise-credential-to-sign-in-to-173-microsoft-365-tenants/26464 "2026-10-17T06:59:23Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![robinhood1995](https://forums.thehomestack.io/letter_avatar_proxy/v4/letter/r/48db29/32.png) [@robinhood1995](https://forums.thehomestack.io/u/robinhood1995)\
**Post date:** [October 17, 2026, 6:59am UTC](https://forums.thehomestack.io/t/hackers-use-compromised-connectwise-credential-to-sign-in-to-173-microsoft-365-tenants/26464/1 "2026-10-17T06:59:23Z")

</div>

Cybersecurity researchers are sounding the alarm related to an active campaign in which unknown threat actors are abusing a compromised Microsoft 365 (M365) credential belonging to ConnectWise Cloud Backup (formerly SkyKick) to gain unauthorized access to customers’ M365 environments.

ConnectWise Cloud Backup is a cloud-based backup and recovery service built for managed service providers (MSPs

* * *
This is a companion discussion topic for the original entry at [https://thehackernews.com/2026/10/hackers-use-compromised-connectwise.html](https://thehackernews.com/2026/10/hackers-use-compromised-connectwise.html)