Nation-state actor uses agentic AI framework ARTEX to automate ConnectWise supply chain attack
In short: Microsoft reports that Storm-0940, a China-state aligned threat actor active since 2021, began using the open-source agentic AI penetration testing framework ARTEX in September 2026 to automate attacks against hundreds of organizations worldwide. Microsoft assesses the actor was behind the recently disclosed ConnectWise supply chain compromise, in which ARTEX-driven password spraying and OAuth application abuse reached over 2,250 downstream tenants at up to 2,900 sign-in attempts per minute. In several cases the actor obtained privileged cloud access in under 3 hours, and follow-on activity included credential and privilege changes aimed at persistence.
This summary was generated automatically by AI from Microsoft Security's publication. It is our own text, not a copy of the original — facts, figures and quotes belong to the source, linked above and below.
What changed?
- 1Storm-0940 used ARTEX (a multi-agent LLM pentest framework) to automate reconnaissance, password spraying and OAuth app abuse at machine speed
- 2Between Oct 10–14, 2026, an automated password-spray campaign hit 327 accounts across 8 organizations, generating 151,000+ failed logons (peak 2,900/minute)
- 3On Oct 16, 2026, ConnectWise disclosed unauthorized access to customer tenants via multiple OAuth application identities, linked by IP to the same infrastructure
- 4Attackers reached more than 2,250 downstream tenants, in several cases achieving privileged access in under 3 hours
- 5Follow-on activity included Microsoft Graph reconnaissance, application credential changes, and attempts to modify privileges for persistence
Why it matters
This shows threat actors operationalizing agentic AI to run full offensive security workflows around the clock, dramatically compressing the time between initial targeting and privileged access — leaving defenders far less time to detect and respond, especially in supply chain and multi-tenant SaaS scenarios.
What it means for AI agents and contact centers
If your company uses Microsoft 365, Entra ID, or any multi-tenant SaaS/OAuth-connected applications (including backup, RMM or integration tools like ConnectWise), review service principal sign-ins, application credential changes and privilege grants going back to October 1, 2026, and follow ConnectWise's containment guidance. Treat any third-party app with broad Graph permissions as a potential high-risk entry point, and consider monitoring for AI-accelerated, machine-speed authentication patterns rather than relying solely on traditional rate-based alerting.
Sources
- Microsoft SecurityOfficialPrimary sourceOriginal article →„AI-driven, large-scale nation-state campaign using ARTEX enables supply chain compromise“21 Oct 2026, 21:23
- Published by source
- 21 Oct 2026, 21:23
- Found by our system
- 21 Oct 2026, 22:23
- Summary generated
- 21 Oct 2026, 22:24
This article was written by AI from the original source. Facts, numbers and prices come from the source; missing values are marked “Not specified”. Legal notice, copyright and privacy