Chinese-linked hackers compromise ConnectWise, target hundreds in global attack, Microsoft says

On October 21, Microsoft disclosed that a Chinese state-aligned hacking group targeted the IT services firm ConnectWise using an AI-driven penetration testing tool. The group, known as Storm-0940, exploited the open-source ARTEX framework to carry out the attack, affecting hundreds of organizations worldwide. ConnectWise CEO Manny Rivelo stated that the company had contained the compromised application connections and was restoring services in controlled phases.

However, the restoration process does not eliminate the unauthorized access that may have already been established within individual customer tenants. The Chinese Embassy in Washington refuted the allegations, asserting that China opposes and combats hacking activities in accordance with the law, while also opposing smears and attacks against China under the guise of cybersecurity concerns.