ITmedia AI+
Original published: Updated on DevPick:
China-linked attackers automate attacks using AI agents; Microsoft warns of involvement in 'ConnectWise' supply chain attack
Microsoft warns that China-linked threat actors are using open-source AI tools to automate attacks against hundreds of organizations globally.
Key points
- •Microsoft announced that China-linked attackers known as "Storm-0940" are using the open-source AI penetration testing tool "ARTEX" to automate attacks.
- •The group is targeting hundreds of organizations worldwide and has been analyzed as being involved in intrusions into customers' Microsoft 365 via ConnectWise.
- •Microsoft is calling for caution, noting that in some cases, attackers have managed to seize administrator privileges in less than three hours.