aiqbench analysis
The AI element here is operational: a state-aligned group used ARTEX, a security-testing framework, to automate scanning, password spraying, and OAuth abuse. The main lesson for AI readers is that AI-assisted tooling lowers the cost of high-volume attacks, but the breach relied on stolen application credentials and pre-approved permissions, not on any AI capability. Targeting counts (2,250+ tenants) also differ from confirmed access (173 tenants), so the scale of successful compromise is still uncertain.
China-Linked Hackers Use ARTEX AI to Target 2,250 Microsoft 365 Tenants After ConnectWise Breach
China-state-aligned hackers used ARTEX, an AI-powered penetration-testing framework, to attempt access to more than 2,250 Microsoft 365 tenants following the ConnectWise Cloud Backup breach. Microsoft attributed the attack to Storm-0940 and reported 2,900 sign-in attempts per minute, leaving security teams little time to investigate and block access. The attackers abused stolen application credentials and permissions […] The post China-Linked Hackers Use ARTEX AI to Target 2,250 Microsoft 365 Tenants After ConnectWise Breach appeared first on Cyber Security News.
China-state-aligned hackers used ARTEX, an AI-powered penetration-testing framework, to attempt access to more than 2,250 Microsoft 365 tenants following the ConnectWise Cloud Backup breach. Microsoft attributed the attack to Storm-0940 and reported 2,900 sign-in attempts per minute, leaving security teams little time to investigate and block access. The attackers abused stolen application credentials and permissions already approved by customers, rather than requiring users to…
Excerpt shown under the publisher's RSS terms · 64 words · full text and figures are on the publisher's site