Storm-0940, a group linked to the Chinese government, used ARTEX, an AI tool, in attacks targeting ConnectWise Cloud Backup.
The tool enabled tests of 2,900 connections per minute across more than 2,250 user environments.
Microsoft says it lets operators work around the clock without human intervention; in some cases, attackers reached privileged systems in under three hours.
How the attacks happened
ARTEX allowed the attackers to attempt 2.900 connections per minute across more than 2.250 user environments. In some cases, they gained access to systems with extended privileges in less than three hours.
The hackers used stolen app credentials to avoid having to log in individually for each user. The attack began in September 2026.
What ConnectWise and Microsoft did
ConnectWise has temporarily suspended its services to restore its systems.
READ ALSO
Meta fined $25 billion for Cambridge Analytica scandal
Microsoft confirmed that ARTEX allows attackers to continue attacks 24/7, without human intervention.
G
Hacks.gr on Google
Set it as a preferred source for cybersecurity updates.
Preferred source
Top comments (0)