Chinese State-Linked Hackers Use AI Tool ARTEX in ConnectWise Supply Chain Attack

Thumbnail Image

The information displayed in the AIM should not be reported as representing the official views of the OECD or of its member countries.

Chinese state-aligned group Storm-0940 used the AI-driven penetration testing tool ARTEX to automate and accelerate cyberattacks, breaching ConnectWise Cloud Backup and targeting over 2,250 Microsoft 365 tenants globally. The AI system enabled rapid unauthorized access, causing significant harm to organizations across multiple sectors.[AI generated]

Why's our monitor labelling this an incident or hazard?

The article explicitly mentions the use of an AI system (ARTEX) in the malicious use context to conduct penetration testing attacks that led to a supply chain compromise and breach of Microsoft 365 tenants. This breach constitutes harm to property and possibly to communities due to data exposure. The AI system's involvement is direct and pivotal in enabling the attack at scale and speed. Therefore, this qualifies as an AI Incident.[AI generated]
AI principles
Privacy & data governanceSafety
Industries
Digital security
Affected stakeholders
Business
Harm types
Economic/PropertyReputational
Business function:
ICT management and information security
AI system task:
Reasoning with knowledge structures/planning

Articles about this incident or hazard