Microsoft report says Storm-0940 used open-source AI agent ARTEX to automate attacks on hundreds of organizations
Microsoft released a report stating that a China-linked actor named Storm-0940 used the open-source AI agent ARTEX to automate attacks on hundreds of organizations across different industries worldwide. ARTEX is released as open source on GitHub and chains together multiple LLM agents, requiring almost no human intervention from reconnaissance to data theft; it logs in using ConnectWise's Microsoft 365 backup and management application key, bypassing user sign-in and MFA, and in several intrusions achieved cloud privileged access from the initial target in under 3 hours. The report also notes that most attack attempts failed, with one password spray recording 151K+ failures and not a single success, and that application sign-in alone does not prove data was stolen.
Microsoft released a report stating that a China-linked actor named Storm-0940 used the open-source AI agent ARTEX to automate attacks on hundreds of organizations across different industries worldwide. ARTEX is released as open source on GitHub and chains together multiple LLM agents, requiring almost no human intervention from reconnaissance to data theft; it logs in using ConnectWise's Microsoft 365 backup and management application key, bypassing user sign-in and MFA, and in several intrusio
Matched fieldsSummary、Body

