Qilin affiliates spear-phish MSP ScreenConnect admin, targeting customers downstream

In January 2025, a phishing email targeting an MSP administrator led to a ransomware attack, with the Qilin ransomware group gaining access to the administrator's credentials and attacking the MSP's customers.