ITmedia AI+
元記事公開:
中国系攻撃者がAIエージェントで攻撃を自動化、「ConnectWise」のサプライチェーン攻撃に関与 Microsoftが警告
AI要約
生成・訂正方針Microsoft warns that China-linked threat actors are using open-source AI tools to automate attacks against hundreds of organizations globally.
重要ポイント
- •Microsoft announced that China-linked attackers known as "Storm-0940" are using the open-source AI penetration testing tool "ARTEX" to automate attacks.
- •The group is targeting hundreds of organizations worldwide and has been analyzed as being involved in intrusions into customers' Microsoft 365 via ConnectWise.
- •Microsoft is calling for caution, noting that in some cases, attackers have managed to seize administrator privileges in less than three hours.