🚨AI-Powered Attackers Target 2,250 Microsoft 365 Tenants
AI-Driven Attacks Exploit ConnectWise Credentials
TL;DR
AI-driven attackers used ARTEX to exploit ConnectWise credentials, targeting over 2,250 Microsoft 365 tenants. The attacks, which began in September, highlight the rapid execution of AI in cyberattacks.
AI-driven attackers used ARTEX, an open-source tool, to exploit ConnectWise credentials, targeting over 2,250 Microsoft 365 tenants. The attacks, which began in September, highlight the rapid execution of AI in cyberattacks, with some breaches taking under three hours. Developers and security teams should be wary of compromised credentials and the use of AI in reconnaissance and privilege escalation. ARTEX, written in Go, was used to automate attacks, making the process faster and more efficient. The attacks peaked at 2,900 attempts per minute, with over 151,000 failed sign-in attempts against 327 accounts.
Key Points
ARTEX, an open-source AI penetration-testing tool, was used to automate attacks against Microsoft 365 environments.
The attacks began in September and targeted organizations worldwide, with over 151,000 failed sign-in attempts.
In some cases, attackers gained privileged cloud access in under three hours, highlighting the speed of AI-driven attacks.
The attackers made 2,900 attempts per minute at peak, showing the scale and intensity of the attacks.
ConnectWise shut down affected application connections, but attackers may still have a foothold in customer environments.
Why It Matters
If you're managing Microsoft 365 tenants with ConnectWise, this is a wake-up call. ARTEX's use shows how AI can accelerate attacks, with breaches from initial targeting to privileged access in under three hours. Developers and security teams must prioritize credential management and monitor for AI-driven reconnaissance and privilege escalation.
Comments
Be the first to comment
Enjoyed this article?
Get it daily. 7am. Free. Reads in 5 minutes.
Join 3,569 builders reading daily.