Chinese state-linked hackers used AI agents to breach ConnectWise, affecting over 2,200 tenants
Microsoft said a China-aligned hacking group used the ARTEX AI-driven penetration testing framework to compromise ConnectWise's cloud backup service. The attack targeted hundreds of organizations worldwide and impacted more than 2,200 ConnectWise tenants. The group, identified as Storm-0940, leveraged the AI tool to automate and accelerate the supply‑chain breach.
Why it matters: AI-powered hacking tools can rapidly scale supply‑chain attacks, raising the risk profile for software vendors and their customers.
Read the coverage
TechCrunchChinese hackers spied on thousands of companies after breaching IT giant ConnectWise ↗techcrunch.com · 12h ago
The RecordMicrosoft blames ConnectWise attacks on Chinese state hacker using ARTEX AI agents ↗therecord.media · 13h ago
ET TechChinese-linked hackers compromise ConnectWise, target hundreds in global attack, Microsoft says ↗economictimes.indiatimes.com · 27h ago
The Hacker NewsChina-Linked Hackers Use ARTEX AI Agents in ConnectWise Supply Chain Attack ↗thehackernews.com · 25h ago
Dark ReadingMicrosoft Links Storm-0940 to ConnectWise Supply Chain Attack ↗darkreading.com · 9h ago
This story so far
How it developed, day by day.
Saturday 24 October
Storm-0940 Leveraged ARTEX AI Agents in ConnectWise Cloud Backup Supply Chain AttackFriday 23 October
Chinese state-linked hackers used AI agents to breach ConnectWise, affecting over 2,200 tenants (this page)
More in Security

Security12h ago3 sources

Security16h ago3 sources
