<![CDATA[China-Linked Hackers Use ARTEX AI Agents in ConnectWise Supply Chain Attack]]>Microsoft has attributed the recent supply chain compromise of the ConnectWise Cloud Backup application to a China state-aligned threat actor tracked as Storm-0940.

According to Microsoft's disclosure on Wednesday, the group leveraged ARTEX, a Go-based agentic AI penetration testing framework, during the incident. ARTEX was subsequently made closed-source following its abuse in cyber attacks targeting South Korean financial institutions. The framework was used to accelerate the intrusion.

Key points:

  • Threat actor: Storm-0940, a China state-aligned group
  • Targeted application: ConnectWise Cloud Backup
  • Tooling: ARTEX, a Go-based agentic AI penetration testing framework
  • ARTEX was moved to closed-source development after being abused in attacks against South Korean financial institutions

Organizations using ConnectWise Cloud Backup should review their exposure and monitor for signs of compromise tied to this supply chain incident.

Source: The Hacker News

Is your organization running ConnectWise Cloud Backup, and if so, what steps are you taking to assess exposure?

]]>https://xploitlk.com/topic/793/china-linked-hackers-use-artex-ai-agents-in-connectwise-supply-chain-attackRSS for NodeTue, 27 Oct 2026 07:23:07 GMTMon, 26 Oct 2026 00:30:19 GMT60