ARTEX AI Attacks Drive ConnectWise Supply Chain Breach

Introduction

Microsoft has disclosed a major shift in attacker capability: Storm-0940, a China-aligned threat actor, used the ARTEX agentic AI framework to automate reconnaissance, password spraying, and OAuth application abuse at scale. For Microsoft 365 and security teams, the key takeaway is speed—some intrusions moved from targeting to privileged cloud access in less than three hours.

What’s new

AI-driven attacks at machine speed

• Storm-0940 used the open-source ARTEX framework to automate offensive workflows across hundreds of organizations.
• Microsoft observed attacks spanning many sectors, including government, financial services, manufacturing, technology, and defense.
• In the ConnectWise-related activity, the actor reportedly reached more than 2,250 tenants and generated sign-in attempts at up to 2,900 per minute.

ConnectWise supply chain compromise linked to Storm-0940

• Microsoft assesses Storm-0940 was behind the recently disclosed ConnectWise supply chain compromise of a multi-tenant application.
• After gaining control of multiple ConnectWise cloud application identities, the actor used already-consented applications to authenticate into customer Microsoft 365 environments.
• Because this relied on app identities, the activity did not require an interactive user sign-in.

Follow-on Microsoft 365 activity

Microsoft observed AI-accelerated post-compromise actions through Microsoft Graph, including:

• Reconnaissance
• Application credential changes
• Privilege modification attempts
• Persistence through OAuth application abuse

Microsoft also emphasized this activity did not result from a vulnerability or compromise in Microsoft products or services.

Why this matters for IT administrators

This incident highlights how agentic AI can compress the defender response window. Traditional alerts may still fire, but security teams have far less time to investigate and contain abuse when attackers can test multiple paths simultaneously and operate continuously.

For Microsoft 365 administrators, application identities and service principals are now a critical monitoring area. A compromised third-party app with existing consent can provide attackers a direct route into tenant data and configuration changes.

Recommended next steps

• Review service principal sign-ins for unusual authentication activity.
• Investigate unexpected application credential additions or changes.
• Audit OAuth app permissions and remove unnecessary consents.
• Hunt for suspicious Microsoft Graph activity using Microsoft Defender XDR detections and queries.
• Follow ConnectWise containment guidance if your environment uses affected integrations.
• Preserve logs and evidence for incident response if suspicious app activity is found.

Bottom line

The Storm-0940 campaign shows that AI-enabled attack automation is no longer theoretical. Security teams should treat app identities, OAuth permissions, and Graph activity as high-priority detection and response areas in Microsoft 365.