Storm-0940 uses ARTEX AI tool and compromised ConnectWise app credentials to target 2,250+ Microsoft 365 tenants
Microsoft attributes the recent ConnectWise security incident to Storm-0940, a China-linked espionage group active since at least 2021. The actor used the open source AI penetration-testing framework ARTEX and compromised ConnectWise application identities to attempt authentication against more than 2,250 Microsoft 365 tenants. Most attem…