Storm-0940 reportedly used AI framework ARTEX to automate attacks targeting hundreds of organizations

Microsoft Threat Intelligence says the China state-aligned group Storm-0940 used ARTEX, an agentic AI penetration-testing framework, to automate attacks targeting hundreds of organizations globally. It assesses the group was responsible for a disclosed ConnectWise supply chain compromise of a multitenant application. Microsoft says ARTEX accelerated abuse of a compromised application to access targets through already-authorized applications without an interactive sign-in. Follow-on activity included reconnaissance, application credential changes and attempts to change privileges.