China-Linked Hackers Use ARTEX AI Agents in ConnectWise Supply Chain Attack
thehackernews.com Oct 22, 2026

China-Linked Hackers Use ARTEX AI Agents in ConnectWise Supply Chain Attack

AI-summarised brief · reviewed before publication

Microsoft revealed that the China‑aligned threat actor Storm‑0940 exploited the ARTEX AI framework to compromise the ConnectWise Cloud Backup supply chain. Using ARTEX, the group performed rapid scanning, password spraying, and OAuth abuse, targeting over 2,250 tenants at 2,900 attempts per minute. The attack, active since 2021, reached privileged cloud access within hours, affecting sectors from aerospace to finance. The incident underscores the growing use of AI‑driven tools for automated, high‑speed cyber intrusions.

💡 Why It Matters

  • · The case shows how AI accelerates credential abuse, shrinking detection windows and enabling attackers to pivot quickly across cloud environments.
  • · It signals a new era where automated tools can turn routine supply‑chain vulnerabilities into global, multi‑sector breaches.