Microsoft Report Accuses China-Linked Hacking Group Storm-0940 of Using AI to Attack Hundreds of Organizations Worldwide

On October 21, Microsoft released a report stating that Storm-0940, a hacking group linked to the Chinese government, has been using the AI tool ARTEX since September to breach Microsoft 365 systems with credentials from the cloud backup application of U.S. IT service provider ConnectWise, attacking hundreds of government, military, semiconductor, and think tank organizations worldwide. In some attacks, high-level cloud privileges were obtained in under three hours. ConnectWise has acknowledged the security incident and is restoring services in phases.

Evidence EVIDENCE

Sources 1 · Archived 0

SourceTypeReliabilityLink

李老师不是你老师

2026-10-22 15:16 · 10月21日，微软发布报告，指控与中国政府关联的黑客组织Storm-0940自9月起利用AI工具ARTEX攻击全球数百家政府、军事、半导体及智库机构，部分攻击不足3小时即取得云端高级权限。

First-hand ●●●●●

Original

Context CONTEXT

Cause Not recorded yet

This event Microsoft Report Accuses China-Linked Hacking Group Storm-0940 of Using AI to Attack Hundreds of Organizations Worldwide 2026.10.21 · Reported

Effect Not recorded yet

Coverage of this event COVERAGE

Sayings · 2026-10-22 15:02 On October 21, Microsoft released a report accusing the hacker group Storm-0940, linked to the Chinese government, of using the AI tool ARTEX since September to attack hundreds of government, military, semiconductor, and think-tank institutions worldwide, with some attacks gaining high-level cloud privileges in less than 3 hours.

Report