Microsoft: China-aligned Storm-0940 used the ARTEX agentic AI hacking framework to compromise ConnectWise and hit 2,250+ Microsoft 365 tenants
Confirmed
Importance: major (4 of 5)The takeaway
Microsoft attributes the ConnectWise cloud-backup supply-chain compromise to the group; ARTEX agents then tried to sign in to more than 2,250 tenants at 2,900 attempts per minute.
Status
- Claim
Confirmed
- Our reporting
- High confidence
- Importance
- Major (4 of 5)
- Last verified
- 22 October 2026
Your AI and this story
- GPT-6 Astra174 days after its cutoff
- Claude Opus 5.5113 days after its cutoff
- Gemini 4 Argon204 days after its cutoff
- Grok 4.7143 days after its cutoff
None of these four assistants can know about it. The closest, Claude Opus 5.5, stops 113 days before it.
Key facts
- Actor: Storm-0940, ‘a China-state aligned actor’; activity ‘as early as September 2026’, ‘targeting hundreds of organizations globally across a broad range of industries’
- Speed: ‘multiple instances where the time from initial targeting to privileged access was less than 3 hours’
- ARTEX: ‘an open-source penetration testing framework that can use any AI model’; ‘a system of LLM-driven agents that run an autonomous penetration test from reconnaissance through data exfiltration with little needed human interaction’; multi-agent, written in Go
- Supply chain: Microsoft assesses Storm-0940 was responsible for the ConnectWise Cloud Backup compromise (ConnectWise advisory Oct 16, 2026); ARTEX used for scanning, password spraying and OAuth application abuse at downstream victims
- Scale: after the breach, ARTEX tried to sign in to more than 2,250 tenants at 2,900 sign-in attempts per minute, then used stolen app credentials for Microsoft Graph reconnaissance, credential changes and privilege escalation attempts
- Microsoft: the activity ‘did not result from a compromise of or a vulnerability in Microsoft corporate systems’
- Earlier: ARTEX had been linked by CrowdStrike (Oct 7) and Genians to the South Korean bank hacks
What happened
Microsoft published a threat-intelligence report tying a China-aligned group to an AI-driven campaign. The group ran ARTEX, an open agentic hacking framework that strings LLM agents through reconnaissance, credential attacks and exfiltration. After compromising ConnectWise’s multi-tenant cloud backup application, the agents used its trusted app identities to authenticate into customer Microsoft 365 tenants without user sign-ins.
Why it matters
It is a major vendor’s public attribution of a large state-linked supply-chain intrusion run largely by AI agents, with machine speed (2,900 sign-in attempts per minute, privileged access in under 3 hours) as the decisive advantage. It came on the same day as PHP2Shell, the AI-found PHP flaw, and shows the attacker side of the “defender’s window” debate.
Sources
1 source from 1 site. Numbers match the chips in the text.
1 source: 1 primary
Primary
Changes
- Filed (Techmeme)