
Chinese-linked hackers use AI to compromise firms globally: Microsoft
What Happened?
Microsoft reported that a Chinese state-aligned hacking group, Storm-0940, used AI tools to compromise ConnectWise, targeting hundreds of organizations across various sectors. The attack involved automated security testing methods and resulted in numerous login attempts.
Key points
- Storm-0940 has been tracked by Microsoft since 2021.
- The group targeted sectors including aerospace, defense, energy, and finance.
- They attempted over 2,250 sign-ins at a rate of 2,900 attempts per minute.
- Between October 10 and 14, they generated over 151,000 failed login attempts.
- Microsoft clarified that the attack did not compromise its own systems.
- ConnectWise is restoring services in phases after the attack.
Key insights
- The use of AI by hackers could lead to faster and more sophisticated attacks.
- Organizations in critical sectors may need to enhance their cybersecurity measures.
- The incident may prompt increased scrutiny of cybersecurity practices in the tech industry.
Why it matters
The incident highlights the increasing use of AI in cyberattacks, raising concerns about security across multiple sectors.
Tags
Entities
Source
Business Standard