🔒Chinese Hackers Use AI to Rapidly Exploit 2,250 Companies
AI-Powered Hackers Target Thousands of Companies
TL;DR
Chinese hackers used AI to exploit ConnectWise's cloud backup service, accessing 2,250 companies' data. The speed of these attacks left little time for defenders to respond.
Chinese hackers exploited ConnectWise's cloud backup service, using AI to rapidly hack into around 2,250 organizations. The attackers stole application credentials, allowing them to log in as authorized users and access emails and files. The AI agents used were attributed to the open-source ARTEX framework, which helps stress-test cyber defenses. This incident highlights the growing threat of AI-powered attacks, especially against systems lacking multi-factor authentication. ConnectWise has paused access to its cloud backup system and is investigating the breach.
Key Points
Chinese hackers stole application credentials from ConnectWise, allowing them to log into customers' Microsoft-hosted environments as authorized users.
Hackers used AI agents to rapidly hack into around 2,250 organizations, demonstrating the speed and scale of AI-powered attacks.
The speed of the attacks allowed hackers to attempt almost 3,000 sign-ins per minute, overwhelming defenders.
ARTEX, an open-source AI framework, was used in the attack to stress-test cyber defenses, highlighting the evolving threat landscape.
ConnectWise is investigating the breach and has paused access to its cloud backup system as of Thursday.
Why It Matters
If you're managing cloud services or handling sensitive data, this breach is a wake-up call. The speed and scale of AI-powered attacks mean traditional defenses may not be enough. ConnectWise's breach shows how quickly attackers can exploit credentials to access customer data, underscoring the need for robust multi-factor authentication and continuous monitoring.
Comments
Be the first to comment
Enjoyed this article?
Get it daily. 7am. Free. Reads in 5 minutes.
Join 3,567 builders reading daily.