MEDIUMSupply Chain
Global

China-Aligned Hackers Used Agentic AI to Target ConnectWise

·Source: Bank Info Security

Updated:

Executive Summary

Microsoft Ties Storm-0940 to Automated Intrusions Across Hundreds of Targets Microsoft linked the ConnectWise supply chain compromise to China-aligned Storm-0940, which used the open-source Artex agentic AI framewo

Analysis

Microsoft Ties Storm-0940 to Automated Intrusions Across Hundreds of Targets Microsoft linked the ConnectWise supply chain compromise to China-aligned Storm-0940, which used the open-source Artex agentic AI framework to automate credential attacks, abuse trusted cloud applications and attempt access to more than 2,250 customer tenants at machine speed.

Indicators of Compromise (2)

URL (1)
https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/china-aligned-hackers-used-agentic-ai-to-target-connectwise-image_small-9-a-33184.jpg
VirusTotalURLhaus
Domain (1)
ismg-cdn.nyc3.cdn.digitaloceanspaces.com
VirusTotalURLhaus
Source Attribution

Originally published by Bank Info Security on Oct 22, 2026.

Related Threats

MEDIUMSupply Chain

Microsoft Links Storm-0940 to ConnectWise Supply Chain Attack

The China-linked actor used an AI-enabled penetration-testing tool to automate and accelerate its attack on more than 2,200 tenants.

Dark Reading
MEDIUMSupply Chain

LiteLLM release pipeline hacked to distribute info-stealer malware

Hackers compromised the LiteLLM project's PyPI package and published malicious Docker images with a payload that steals credentials, secrets, and environment variables. [...]

BleepingComputer
MEDIUMSupply Chain

Microsoft blames ConnectWise attacks on Chinese state hacker using ARTEX AI agents

A Chinese government-aligned hacking group used automated tools to carry out the recent supply chain attack on IT management software company ConnectWise and is using the same techniques to try to compromise organizations around the globe, Microsoft said.

The Record