MEDIUMSupply Chain
Global

China-Linked Hackers Use ARTEX AI Agents in ConnectWise Supply Chain Attack

·Source: The Hacker News

Updated:

Executive Summary

Microsoft on Wednesday disclosed that a China state-aligned actor dubbed Storm-0940 was behind the recent supply chain compromise of the ConnectWise Cloud Backup application. During the incident, Storm-0940 used ARTEX, a Go-based agentic AI penetration testing framework that was made closed-source in the wake of its abuse against South Korean financial institutions, to speed up scanning and

Analysis

Microsoft on Wednesday disclosed that a China state-aligned actor dubbed Storm-0940 was behind the recent supply chain compromise of the ConnectWise Cloud Backup application. During the incident, Storm-0940 used ARTEX, a Go-based agentic AI penetration testing framework that was made closed-source in the wake of its abuse against South Korean financial institutions, to speed up scanning and
Source Attribution

Originally published by The Hacker News on Oct 22, 2026.

Related Threats

MEDIUMSupply ChainNEW

China-Aligned Hackers Used Agentic AI to Target ConnectWise

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/china-aligned-hackers-used-agentic-ai-to-target-connectwise-image_small-9-a-33184.jpg" align=right hspace=4><b>Microsoft Ties Storm-0940 to Automated Intrusions Across Hundreds of Targets</b><br>Microsoft linked the ConnectWise supply chain compromise to China-aligned Storm-0940, which used the open-source Artex agentic AI framewo

Bank Info Security
MEDIUMSupply Chain

LiteLLM release pipeline hacked to distribute info-stealer malware

Hackers compromised the LiteLLM project's PyPI package and published malicious Docker images with a payload that steals credentials, secrets, and environment variables. [...]

BleepingComputer
MEDIUMSupply Chain

Microsoft blames ConnectWise attacks on Chinese state hacker using ARTEX AI agents

A Chinese government-aligned hacking group used automated tools to carry out the recent supply chain attack on IT management software company ConnectWise and is using the same techniques to try to compromise organizations around the globe, Microsoft said.

The Record