ConnectWise ScreenConnect explained

ConnectWise Control
Operating System:Windows
Linux
macOS
Android
iOS
Genre:Remote desktop software
License:Proprietary
Developer:ConnectWise, LLC
Latest Release Version:22.5.7881
Author:Elsinore Technologies

ConnectWise ScreenConnect, previously ConnectWise Control, is a self-hosted remote desktop software application. It was originally developed by Elsinore Technologies in 2008 under the name ScreenConnect, and is now owned by ConnectWise Inc.

History

Elsinore Technologies developed ScreenConnect in 2008 as an add-on to their RMM Software IssueNet in order to assist in providing remote support to end users. They later began distributing the software as a standalone product.[1]

Acquisition by ConnectWise

On February 11, 2015, PSA company ConnectWise announced their acquisition of the ScreenConnect software in order to improve the remote control features of the latest release of their RMM Software, LabTech.[2] ScreenConnect, LLC announced that, despite being acquired by ConnectWise, they would continue to operate under their original name in addition to offering their software as a standalone product.[3]

Starting in early 2017, ConnectWise changed the name of ScreenConnect to ConnectWise Control, saying that this was to simplify their software under one company.[4]

On May 15, 2023, ConnectWise Control was rebranded back to ConnectWise ScreenConnect.[5]

On Thursday, February 22, 2024, version 6 of the self-hosted edition server application of ScreenConnect reported a vulnerability. A patch was available for the latest version (23) the same day, offering a temporary free upgrade.[6]

Product

How it works

The product is available as a cloud hosted Software as a Service (SaaS) or self-hosted server application[7] [8] that permits the primary user to host the software on their own servers, PC, virtual machine (VM), or virtual private server (VPS). Once installed, the central web application can be made visible inside and outside of the local area network (LAN). ConnectWise ScreenConnect has a proprietary protocol and exposes an open architecture structure that can be utilized by users to implement custom plugins, scripting, or various integrations.

A generic use model would start with a host initiating a session through the central web application. A participant would then join a session by clicking on an email link or via the guest page of the application. An unattended client can be created and deployed to a targeted machine without the need for human intervention.[9] [10] The executable is ScreenConnect.ClientService.exe (x86) on Windows based OSs, and is a signed by a COMODO RSA Code Signing CA certificate [Publisher: ScreenConnect Software].

Features

Most commonly expected features for a product in this arena are present. Examples include reboot and reconnect, drag and drop file transfer, screen recording, safe mode support, multiple monitor, command line access, wake-on-LAN, VoIP, chat, and a custom toolbox for quick deployment of support tools.

In addition to features that facilitate communication, ConnectWise ScreenConnect also offers complete control over branding and customization of the product design, logo, color scheme, icons, text strings, and localization.

Security

The software is self-hosted providing users the ability to control the flow of data behind their own firewall and security implementations. ConnectWise Control uses 256-bit AES encryption to package and ship data, supports two factor authentication, has server level video auditing, and granular role-based security. Forms-based and Windows Authentication are optional authentication methods for security purposes.

Compatibility

Host (presenter or technician): can utilize Mac, Linux, Windows, iOS or Android operating systems.Guest (customer or participant): can connect from Mac, Linux or Windows. ConnectWise ScreenConnect can also be utilized to remotely support Android devices, with complete view and control available for devices manufactured by Samsung.

Technology

Server

The on-site ConnectWise ScreenConnect server is self-hosted, and runs as a .NET Framework application. On Microsoft Windows it runs as a set of services. In 2015, ConnectWise ScreenConnect launched a hosted cloud platform, providing a way to use the ConnectWise ScreenConnect software with no local server installation required.

The ConnectWise ScreenConnect server runs as a set of four discrete services:

Clients

ConnectWise ScreenConnect sessions are arranged through the web application. Once users join sessions, a ConnectWise ScreenConnect client is launched to connect to the Relay service. ConnectWise ScreenConnect targets clients based on device and operating system:

Licensing model

ConnectWise ScreenConnect is commercial software. Licenses sit in a pool and are available to any user on any workstation. There are three types of license: a single concurrent that allows one simultaneous connection per license, an unlimited which allows an unlimited number of concurrent sessions as long as all sessions are utilizing the same server, and enterprise licenses which provide flexible options for SaaS, multi-user, or custom functionality.

The concurrent license types are bought as a one-time purchase, with lifetime support. A subscription model is used for updates, which are free during the first year after purchase, after which the "update license" must be renewed. Pricing for updates depends on when the update license was last-renewed.[13]

Misuse

The program under its previous name of ScreenConnect has been used in fraudulent technical support scams where the fraudster is able to gain the control of the victims computer by telephoning and tricking the user to install the software and permitting a connection. The free trial period has been utilized to avoid any software costs in doing this, and similar products such as TeamViewer, AnyDesk and Ammyy Admin have also been used for the scam.

Cybercriminal group LockBit exploited vulnerabilties in ScreenConnect.[14]

See also

External links

Notes and References

  1. Web site: About ScreenConnect Remote Support Software and ScreenConnect Software, LLC. ScreenConnect. ScreenConnect, LLC. 3 April 2015.
  2. Web site: ConnectWise Acquires ScreenConnect. ConnectWise. 3 April 2015. 6 April 2015. https://web.archive.org/web/20150406211628/http://www.connectwise.com/company/press-releases/2015/connectwise-acquires-screenconnect. dead.
  3. Web site: ScreenConnect joins the ConnectWise family!. ScreenConnect. ScreenConnect, LLC. 3 April 2015.
  4. Web site: ScreenConnect is Now ConnectWise® Control™. Connectwise. 3 June 2017.
  5. Web site: We're bringing back the ScreenConnect name ConnectWise . 2023-05-15 . screenconnect.connectwise.com . en-US.
  6. Web site: ConnectWise ScreenConnect 23.9.8 security fix . ConnectWise . 19 February 2024.
  7. Wareprise Remote Support Software
  8. Ohlhorst, Frank (June 9, 2013). eWeek ScreenConnect Shifts Remote Support From the Cloud Back to the Desktop
  9. Jon Jacobi PCWorld Reviews ScreenConnect
  10. Web site: Remote Support Software and Services | ConnectWise Control. 2010-12-02. 2010-04-19. https://web.archive.org/web/20100419045545/http://www.screenconnect.com/LearnMore.aspx. dead.
  11. Web site: ScreenConnect 5.2 Release Log. ScreenConnect Remote Support Software User Forum. ScreenConnect, LLC. 3 April 2015. 8 April 2015. https://web.archive.org/web/20150408144828/http://forum.screenconnect.com/yaf_postst5146_ScreenConnect-5-2-Release-Log.aspx. dead.
  12. Web site: Softsea reviews ScreenConnect . 2010-12-02 . https://web.archive.org/web/20100818013217/http://www.softsea.com/review/ScreenConnect.html . 2010-08-18 . dead .
  13. Web site: Upgrade your ScreenConnect Remote Support Software. ScreenConnect. ScreenConnect, LLC. 16 April 2015.
  14. Web site: Goodin . Dan . Ransomware associated with LockBit still spreading 2 days after server takedown . Ars Technica . 23 February 2024 . en-us . 22 February 2024.