Continuum says one of its MSP partners was hit likely by a phishing campaign that managed to steal its credentials. Credentials were then used to disable antivirus and run scripts to deploy ransomware at several end clients The company said none of its systems were compromised in the breach, which appears to have impacted just the one partner. Continuum said it is for now removing access to any scripts or tasks that are capable of uninstalling antivirus or endpoint protection and eliminating the ability for all users to create new custom scripts.”]

