supply-chain
Microsoft Links Storm-0940 to ConnectWise Supply Chain Attack
Medium
Summary
A China-linked threat actor, Storm-0940, used an AI-powered penetration testing tool (ARTEX) to rapidly target over 2,250 downstream customer environments through ConnectWise Cloud Backup. The incident highlights the increasing use of AI in offensive security and the potential for rapid, widespread compromise.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data
Also covered by 7 other source(s)
- Hackers Use Compromised ConnectWise Credential to Sign In to 173 Microsoft 365 Tenants
- ConnectWise Suspends Cloud Backup After Attackers Compromise Microsoft 365 Tenants
- ConnectWise turns off its SaaS-y backup, security, and management services to probe security SNAFU
- ConnectWise Suspends Cloud Services in Response to Cyberattack
- ConnectWise suspends Cloud Backup service after supply chain attack
- China-Linked Hackers Use ARTEX AI Agents in ConnectWise Supply Chain Attack
- Microsoft says ConnectWise breach let Chinese spies loose on 2,250 cloud tenants