GeneralBreaking NewsBreakingLatest News
Microsoft Reports Chinese Hackers Used AI to Target Hundreds of Organizations
Sentiment: NeutralHigh Priority
What Happened?
Microsoft warns that a Chinese hacking group, Storm-0940, has used AI tools to infiltrate numerous global companies. The attack exploited vulnerabilities in ConnectWise's Cloud Backup service.
Key points
- Storm-0940 used AI to automate attacks, gaining control over cloud networks in under three hours.
- The hackers employed a supply chain attack, targeting ConnectWise's Cloud Backup service.
- ConnectWise CEO Manny Rivelo confirmed the involvement of a China-aligned group.
- The AI tool ARTEX was misused to automate malicious tasks, including password spraying and OAuth abuse.
- The attack reached over 2,250 company systems, with 2,900 sign-in attempts made per minute.
Key insights
- The rapid automation of attacks using AI could lead to more sophisticated cyber threats.
- Organizations may need to reassess their cybersecurity strategies to counter AI-driven attacks.
- The incident raises concerns about the security of widely used IT services like ConnectWise.
Why it matters
This incident highlights the growing threat of AI in cyberattacks, emphasizing the need for enhanced security measures.
Entities
Microsoft· OrganizationStorm-0940· OrganizationConnectWise· CompanyChina· Country
Source
India Today
