Remote-support software allows an authorized technician to troubleshoot computers without visiting every desk. That is enormously useful, especially for businesses with several locations or employees working remotely.
It also means the software deserves careful protection. If someone obtains unauthorized access to a remote-management system, the same convenience that helps a technician support many computers can give an attacker a way to reach them.
A developing incident involving ConnectWise ScreenConnect illustrates that risk.
On November 11, ConnectWise announced that it was investigating unauthorized access to certain partner ScreenConnect environments and the installation of unauthorized remote-access software on customer computers.
As of its November 12 update, ConnectWise said it had found no evidence that its infrastructure was compromised or that the initial access resulted from a vulnerability in ScreenConnect itself. Its investigation instead focused on possible abuse of independently developed third-party extensions.
ConnectWise identified approximately 400 partner environments with at least one extension from the RMM+ family installed. Five related extensions were disabled as a precaution. The company stressed that having one of those extensions installed does not, by itself, prove an environment was compromised.
That distinction matters. This is not evidence that every business using ScreenConnect is in danger. It is a reason for businesses and their IT providers to verify their own environments promptly.
Huntress reported observing commands sent through multiple cloud-hosted ScreenConnect panels on November 11. Those commands installed unauthorized ScreenConnect clients and a toolkit called SCKit.
Huntress counted at least 288 affected hosts across 48 organizations it protects. Researchers also found code designed to spread through technician connections, although Huntress said it had not observed that part of the toolkit succeeding in the host logs it reviewed.
Because the investigation is continuing, small-business owners should avoid relying on rumors or assuming that a routine antivirus scan settles the question.
If another company manages your computers, contact that company through its normal phone number or support portal and ask:
A clear provider should be able to explain what it uses, whether the named extensions were present, what was reviewed and whether any additional action is necessary.
Employees do not need to become cybersecurity investigators. They do need a dependable process for remote support.
Staff should only accept a remote session they requested or independently verified. An unexpected call, chat message or pop-up claiming that “IT needs access immediately” should be confirmed through the company’s established support number.
Employees should also report unfamiliar remote-support windows, unexplained software installations, unexpected mouse movement or a technician connection they did not request. They should not try to uninstall remote-management software themselves, since legitimate support tools can look similar to unauthorized copies.
Removing remote-support software without coordination can disrupt maintenance, monitoring and legitimate help-desk access. It may also remove evidence that a security team needs to understand what happened.
The safest owner-level response is to ask direct questions, document the answers and let qualified IT professionals examine any potentially affected systems using the vendor’s current guidance.
Himala and his team at Cybernetic Networks have been amazing. We have been a customer of Cybernetic Networks for well over 14 years now, both personally and professionally. Himala and his team are professional, reachable and on the cutting edge of technology. We have enjoyed doing business with Cybernetic Networks for many years and still rely on their knowledge, skills and technology every day
Himala and his Cybernetic team have never let me down! For over 10 years now they have been fixing my technical issues, set up all my new networks and computers and have safeguarded me from any hackers or malware. You can trust this company to navigate you as your company grows and to keep you on track with the latest in security and safety
I am a solo practicing neurologist and have had all my IT needs covered through Cybernetic Networks since 2007. They are the best! All of their tech support staff is extremely knowledgeable and efficient. Just as importantly, they are quickly responsive whenever we need their assistance. I couldn’t be happier with their service and give them my highest recommendation!
I couldn't be happier with Cybernetics - they are experts, always respond quickly , and solves any issues I have.
Cybernetic Networks has been advising and supporting all our IT issues and purchases for the last 18 years. They are very responsive and extremely knowledgeable- always providing us with timely services.
It is not often you find small business companies that are not only rewarding to work with, but also have integrity, truth and skill. I have worked with this company for over 20 years, and the service is outstanding. I can easily recommend that if you need an IT company, this is the one to get. Full STOP! Look no further, you will be happy that you did. Sue Myhelic, Gulf Breeze Real Estate, Naples, Florida.
Himala and his team from Cybernetic Networks, Inc. has been an integral part of our successful retail business for the past 20 years. He is extraordinarily knowledgable and always available for our IT needs. Thanks to Himala and his team we are always up and running.
