Cybersecurity News
Filters
Filtered by tag: connectwise × Clear
China-Linked Hackers Use ARTEX AI to Target 2,250 Microsoft 365 Tenants After ConnectWise Breach
Matched: Claude
China-linked hackers using Storm-0940 exploited the ConnectWise Cloud Backup breach to target over 2,250 Microsoft 365 tenants, using the AI-powered penetration framework ARTEX. Attackers abused stolen application credentials rather than passwords, authenticating as trusted apps and using Microsoft Graph to alter permissions. Microsoft and Zscaler published findings October 21, noting some attacks achieved privileged access in under three hours.
China-Linked Hackers Use ARTEX AI Agents in ConnectWise Supply Chain Attack
Matched: Agentic
Microsoft linked Chinese state actor Storm-0940 to a supply chain attack on ConnectWise's Cloud Backup application. The group used ARTEX, a closed-source Go-based AI penetration testing framework, to accelerate scanning during the intrusion. ARTEX was made private after earlier abuse targeting South Korean financial institutions.