Descripción: Microsoft reported that China-aligned hackers used ARTEX, an AI penetration-testing framework, to access customers' Microsoft 365 environments through stolen credentials for ConnectWise's cloud backup services. Agents reportedly changed credentials and privileges in some environments to retain unauthorized access. The activity formed part of a global campaign; the extent of compromise and any data theft remained uncertain.
Entidades
Ver todas las entidadesAlleged: Large language model developers , ARTEX developers y AI agent system developers developed an AI system deployed by Threat actors , Storm-0940 , China-linked threat actors , AI agent system deployers y Agentic threat actors, which harmed Microsoft , Enterprises relying on Microsoft 365 and identity services , ConnectWise customers , ConnectWise y Information integrity.
Estadísticas de incidentes
ID
1781
Cantidad de informes
2
Fecha del Incidente
2026-10-15
Editores
Daniel Atherton
Informes del Incidente
Cronología de Informes
Loading...
As early as September 2026, Storm-0940, a China-state aligned actor, used the agentic AI penetration testing framework ARTEX to automate attacks targeting hundreds of organizations globally across a broad range of industries. Several of the…
Loading...
Oct 21 (Reuters) - A Chinese state-aligned hacking group used an AI-driven penetration testing tool to compromise IT services firm ConnectWise as part of a campaign that targeted hundreds of organizations globally, Microsoft said on Wedne…
Variantes
Una "Variante" es un incidente de IA similar a un caso conocido—tiene los mismos causantes, daños y sistema de IA. En lugar de enumerarlo por separado, lo agrupamos bajo el primer incidente informado. A diferencia de otros incidentes, las variantes no necesitan haber sido informadas fuera de la AIID. Obtenga más información del trabajo de investigación.
¿Has visto algo similar?
Incidentes Similares
Did our AI mess up? Flag the unrelated incidents
Incidentes Similares
Did our AI mess up? Flag the unrelated incidents