Recently I did an article on CSOOnline about how MSP’s have been targeted lately in attacks in order to gain access to clients.
If you haven’t already done so, make sure you have MFA on your admin accounts as phishing attacks sent to admin accounts is a key way that attackers gain a foothold into systems.