ConnectWise
- ID
- S0591
- Type
- Tool
- Associated names
- ScreenConnect
- Platforms
- Windows
- Source
- attack.mitre.org
- MITRE last modified
- 14 Oct 2025
ConnectWise is a legitimate remote administration tool that has been used since at least 2016 by threat actors including MuddyWater and GOLD SOUTHFIELD to connect to and conduct lateral movement in target environments.[1][2]