A detrimental week for cybersecurity took a severe turn for thousands of additional companies, as they became targets of Chinese hackers following the compromise of IT management and remote access giant ConnectWise.
According to security researchers at Microsoft, these China state-aligned actors breached ConnectWise’s cloud backup service to exfiltrate application credentials. These credentials establish vital data links between ConnectWise and its corporate customers, who depend on the cloud service to safeguard their business data.
With these stolen credentials, the hackers were able to infiltrate their victims' Microsoft-hosted environments under the guise of authorized users, granting them access to confidential emails and other sensitive files.
Microsoft reported that the attackers utilized AI agents to swiftly compromise approximately 2,250 organizations, executing nearly 3,000 attempted sign-ins per minute. This unprecedented speed leaves defenders with minimal time to detect and respond to the intrusion.
The efficiency of the mass-hacks was driven by AI agents, particularly ARTEX, an open-source framework designed to stress-test cyber defenses using AI models. This same malicious software was previously employed to compromise South Korea’s financial systems, often targeting weak security measures and a lack of multi-factor authentication.
ConnectWise has temporarily suspended access to its cloud backup system while it conducts an investigation into the breach. As of Thursday, the company has stated that it is actively working to restore service operations.
The Editorial Staff at AIChief is a team of professional content writers with extensive experience in AI and marketing. Founded in 2025, AIChief has quickly grown into the largest free AI resource hub in the industry.