Chinese Hackers Breach ConnectWise, Spy on 2,250 Firms Using AI
Updated
Updated · TechCrunch · Oct 22
Chinese Hackers Breach ConnectWise, Spy on 2,250 Firms Using AI
3 articles · Updated · TechCrunch · Oct 22
Summary
Microsoft said China state-aligned hackers used AI agents to compromise about 2,250 organizations after breaching ConnectWise’s cloud backup service and stealing application credentials.
Those credentials let the attackers enter customers’ Microsoft-hosted environments as authorized users, giving them access to emails and other files tied to ConnectWise backup links.
Nearly 3,000 attempted sign-ins per minute were driven by ARTEX, an open-source AI framework, a pace Microsoft said left defenders little time to detect and respond.
ConnectWise has paused access to the cloud backup system and is investigating the breach while working to restore the service.
The same AI software was recently linked to a compromise of South Korea’s financial systems, underscoring how weak controls such as missing multi-factor authentication can amplify such attacks.