China-aligned hackers, identified as Storm-0940, have utilized an AI-driven penetration testing framework called ARTEX in a large-scale supply chain attack targeting ConnectWise. This sophisticated attack involved AI agents that could operate autonomously, accelerating reconnaissance and credential abuse. The attackers attempted sign-ins at over 2,250 Microsoft 365 tenants, with some attacks achieving privileged access in under three hours, exploiting stolen ConnectWise app credentials that bypassed traditional password guessing defenses. The use of AI agents allowed for rapid, round-the-clock operations, significantly reducing the time for defenders to detect and respond. AI
IMPACT Demonstrates the increasing use of autonomous AI agents by threat actors, accelerating attack speeds and reducing detection windows for defenders.
RANK_REASON The article details the use of an AI framework (ARTEX) by malicious actors in a cyberattack, fitting the 'tool' category for its focus on the application of AI in a specific, albeit negative, context.
- Anthropic
- ARTEX
- China
- Claude Code
- ConnectWise
- Microsoft
- Microsoft 365
- Microsoft Defender
- Microsoft Entra
- Storm-0940
AI-generated summary · Google Gemini · from 1 sources. How we write summaries →
