China-Aligned Hackers Deploy AI Agents in ConnectWise Supply Chain Attack, Compromising Over 2,250 Microsoft 365 Tenants

China-aligned hacking group Storm-0940 recently deployed advanced AI agents in a sophisticated supply chain attack targeting ConnectWise Cloud Backup, leading to attempted sign-ins at more than 2,250 Microsoft 365 tenants. Microsoft disclosed the incident on a Wednesday, revealing that the attackers leveraged an open-source agentic AI penetration testing framework known as ARTEX to significantly accelerate their operations, with some attacks achieving privileged access in under three hours.

The incident represents a critical escalation in cyber warfare, showcasing how state-sponsored actors are integrating artificial intelligence to enhance the speed and efficacy of their campaigns. Storm-0940, identified by Microsoft as a China-state-aligned entity, gained unauthorized access to a multi-tenant application within the ConnectWise Cloud Backup ecosystem. This initial breach allowed the group to obtain ConnectWise app credentials, which they then used to authenticate into customer tenants as the applications themselves, bypassing the need for interactive user sign-in.

While automated password guessing attempts by the group, peaking at 2,900 attempts per minute on October 11, largely failed and resulted in account lockouts for nearly 98% of the activity, the stolen application credentials proved far more effective. The AI agents managed over 200 successful sign-ins in less than four minutes using just four application credentials, all originating from the same IP range. Once inside the targeted Microsoft 365 tenants, the hackers engaged in various malicious activities, including Graph and directory operations, reconnaissance, changing application credentials, and modifying identities, groups, and privileged roles.

The rapid progression from initial targeting to privileged access—often in less than three hours—poses an immense challenge for security teams, particularly those in small and mid-sized businesses (SMBs). This compressed timeline drastically shortens the window available for detection, investigation, and response, underscoring the need for highly automated and proactive security measures. For SMBs, which often operate with limited IT resources and cybersecurity expertise, such swift attacks can be devastating, potentially leading to significant data breaches, operational disruptions, and severe financial consequences.

ConnectWise has responded by disabling affected services, including SaaS Security and Cloud Management, as a precautionary measure. The company has initiated a phased restoration process, which is expected to take several days. To date, ConnectWise has reported no indicators that partner backup data was compromised. Microsoft has advised affected customers to keep their app connections disabled until formal restoration instructions are issued and to thoroughly review activity logs from the month of the attack.

This incident also highlights the broader implications of supply chain vulnerabilities. As businesses increasingly rely on third-party software and services, a compromise in one vendor can cascade through hundreds or thousands of downstream clients. The use of AI agents like ARTEX, which was reportedly made closed-source after its abuse against South Korean financial institutions, further complicates the threat landscape by enabling attackers to automate complex penetration testing tasks, making their attacks more efficient and difficult to thwart.

Microsoft, in response to the evolving threat landscape, is reportedly expanding its Project Perception security platform to better address risks posed by AI agents that interact with sensitive company information and systems. This move acknowledges the growing concern that AI agents, while powerful tools, can also be weaponized to exploit vulnerabilities at unprecedented speeds.

The deployment of AI agents in this ConnectWise supply chain attack serves as a stark reminder that traditional cybersecurity defenses, while necessary, may no longer be sufficient against highly advanced and rapidly executed threats. The speed at which privileged access was gained in this incident means that many small and mid-sized businesses, which often lack the sophisticated threat detection and rapid response capabilities of larger enterprises, are at particular risk. In our experience, many SMBs are still grappling with the fundamentals of cybersecurity hygiene, let alone preparing for AI-augmented attacks that can bypass conventional defenses with alarming efficiency. This incident underscores the critical importance of robust Cybersecurity Compliance, ensuring that businesses not only meet regulatory requirements but also implement proactive strategies to manage third-party risks and enhance their incident response capabilities. We regularly see clients struggle with the complexity of securing their digital supply chains and integrating advanced threat intelligence into their operational frameworks. C&S Finance Group LLC helps businesses navigate these complex challenges, offering tailored strategies to bolster their defenses against such sophisticated threats. To learn more about how we can help your business strengthen its cybersecurity posture, contact C&S Finance Group LLC at csfinancegroup.com.

Looking ahead, businesses must prioritize a multi-layered security approach that includes stringent vendor risk management, enhanced identity and access controls, and continuous monitoring for anomalous activity. The integration of AI into both offensive and defensive cybersecurity strategies is set to accelerate, prompting a need for organizations to not only understand these new threats but also to leverage AI-powered solutions for their own protection. The industry will be closely watching how ConnectWise completes its restoration and how Microsoft's Project Perception evolves to counter the escalating threat from AI-driven attacks.