Chinese state-linked hackers deploy agentic AI to compromise Connectwise in massive supply chain attack
A Chinese state-aligned threat actor tracked as Storm-0940 used an open-source agentic AI framework and compromised application credentials from IT management provider ConnectWise to carry out a high-speed, automated supply chain attack.
According to a threat intelligence disclosure from Microsoft, the hackers turned stolen ConnectWise Cloud Backup (formerly SkyKick) credentials against more than 2,250 downstream Microsoft 365 customer tenants globally, attempting to achieve persistent cloud access at machine speed.
The campaign demonstrates a significant escalation in how nation-state actors integrate autonomous AI agents into offensive operations to scale supply chain intrusions faster than human security teams can react.
Weaponizing the ARTEX AI Framework at Machine Speed
Central to the operation was Storm-0940’s deployment of ARTEX, an open-source agentic AI penetration-testing framework. Rather than relying on manual operator intervention, the threat actor tasked autonomous AI agents to continuously perform reconnaissance, execute password spraying, and abuse OAuth applications across targeted cloud environments.
The agents generated up to 2,900 sign-in attempts per minute across targeted systems. On October 11 alone, Microsoft recorded over 111,000 failed authentication attempts. In multiple compromises, the agentic AI workflow enabled the hackers to move from initial target selection to obtaining privileged cloud access in under three hours.
The campaign targeted hundreds of enterprise networks across high-value sectors, including aerospace, defense, financial services, energy, government, semiconductor, and legal organizations.
ConnectWise Response and Cloud Tenant Isolation
ConnectWise confirmed that the breach specifically impacted its Cloud Backup integration connections, forcing the firm to isolate affected application endpoints and begin a phased restoration process following security audits. However, both ConnectWise and Microsoft warned that severing the compromised backup connection does not automatically clear unauthorized access or persistent OAuth tokens established inside individual customer Microsoft 365 tenants.
ConnectWise urged affected organizations to keep their connections disabled until formal remediation protocols are completed and to conduct independent forensic sweeps inside their tenant environments.
The Emergence of Agentic AI in Nation-State Cyber Warfare
The attack marks one of the most prominent documented cases of a state-backed actor using autonomous agentic AI to execute a complex supply chain compromise. Security researchers noted that while automated password spraying and credential stuffing generated significant log noise, the sheer speed of agentic AI workflows drastically compresses the window for security operations center (SOC) analysts to detect, isolate, and remediate unauthorized cloud access.
