China-Linked Threat Group Storm-0940 Exploits ARTEX AI Framework in ConnectWise Supply Chain Attack

Microsoft disclosed that China-aligned actor Storm-0940 exploited the ConnectWise Cloud Backup application through the ARTEX AI penetration testing framework. The closed-source Go-based tool, previously linked to attacks on South Korean financial institutions, was used to accelerate the supply chain compromise.

Microsoft on Wednesday disclosed that a China state-aligned actor dubbed Storm-0940 was behind the recent supply chain compromise of the ConnectWise Cloud Backup application.

During the incident, Storm-0940 used ARTEX, a Go-based agentic AI penetration testing framework that was made closed-source in the wake of its abuse in cyber attacks targeting South Korean financial institutions, to speed

Read original article