Qilin affiliates spear-phish MSP ScreenConnect admin, targeting customers downstreamBy rooter / April 1, 2025 Attack matches three-year long pattern of ScreenConnect attacks tracked by Sophos MDR as STAC4365.