This article was originally published on ThreatChain — decentralized threat intelligence.

Your security tools might have missed this one. ConnectWise is actively targeting networks right now — here's what you need to know before it hits yours.

A new ConnectWise sample was identified by threat intelligence feeds on 2026-04-29 10:01:20. This post breaks down what we know about the specific sample, how to recognize related activity on your network, and what to do if you or your organization might be affected.

The Sample at a Glance

Field Value

SHA-256 7b382d57978651b5a3a03d91ceafab42c79b4cc690c7e520f7fce3af19b735b9

File name support.client.exe

File type exe

Size 305.2 KB

Origin (first observed) SK

First seen 2026-04-29 10:01:20

Family ConnectWise

Tags ConnectWise, signed

VirusTotal detection 17/75 engines flagged malicious

What ConnectWise Does

ConnectWise is a malware family observed delivering malicious payloads to Windows systems.…