Cybersecurity News
Filters
Filtered by category: The Hacker News, tag: supply chain attack × Clear
China-Linked Hackers Use ARTEX AI Agents in ConnectWise Supply Chain Attack
Matched: Agentic
Microsoft linked Chinese state actor Storm-0940 to a supply chain attack on ConnectWise's Cloud Backup application. The group used ARTEX, a closed-source Go-based AI penetration testing framework, to accelerate scanning during the intrusion. ARTEX was made private after earlier abuse targeting South Korean financial institutions.
Fake Web3 Accelerator Uses npm Packages to Spread Malware and Hijack AI Agent Traffic
Matched: Artificial Intelligence, Claude, Gemini
A fake Web3 accelerator is luring developers with promises of free AI credits for Claude and Gemini, coding tools, and security audits, while distributing malicious npm packages. The packages deploy information-stealing malware and backdoors targeting both Windows and macOS systems, according to Elastic Security researchers.