Microsoft blames ConnectWise attacks on Chinese state hacker using ARTEX AI agents
Chinese state hackers use AI tool ARTEX for supply chain attacks on ConnectWise.
Microsoft reports that a Chinese state-aligned group, Storm-0940, is leveraging an AI penetration testing framework called ARTEX to conduct supply chain attacks. This group has targeted various industries globally, including aerospace, defense, and finance, achieving privileged cloud access in under three hours in some instances. The ARTEX tool, originally intended for security research, has been taken offline by its developer due to its misuse by malicious actors.
AI summary of the linked source. Not reviewed by an editor. How this works
Run Microsoft?
Get an email when a new story names Microsoft, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
What helps against this
How we list vendors
- Identity threat detection and response (ITDR)
Attackers who log in with real, stolen credentials get noticed.
- Cloud security posture management (CSPM and CNAPP)
Misconfigured cloud storage and over-permissive roles get caught before they leak.
- Endpoint detection and response (EDR and XDR)
Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.