Microsoft Uncovers AI-Driven Global Cyber Attack on ConnectWise by Chinese-Linked Hackers

A Chinese state-aligned hacking group has compromised IT services firm ConnectWise using an AI-driven penetration testing tool, targeting hundreds of organizations globally, Microsoft reported on Wednesday.

Microsoft's analysis, alongside evidence reviewed by ConnectWise, indicates that a China state-aligned group was behind the attack on ConnectWise Cloud Backup, according to a separate statement from ConnectWise CEO Manny Rivelo.

In response to the breach, Rivelo stated that ConnectWise contained the affected application connections and is restoring services in controlled phases. However, he warned that these actions do not automatically remove unauthorized access that may already exist within individual customer tenants, which will require separate reviews.

The hacking group, tracked by Microsoft as Storm-0940, utilized an open-source penetration testing framework called ARTEX to carry out the widespread campaign.

The Chinese Embassy in Washington did not immediately respond to a request for comment. 

SOURCE: REUTERS