- BIST10011,220-3.08%
- USD49.60+0.05%
- EUR55.68+0.11%
- GOLD4,048.10-2.46%
- INTEREST36.00%-1.00
- BITCOIN81,279-3.27%
- October 22, 202619°
- BIST10011,220-3.08%
- USD49.60+0.05%
- EUR55.68+0.11%
- GOLD4,048.10-2.46%
- INTEREST36.00%-1.00
- BITCOIN81,279-3.27%
- October 22, 202619°
Microsoft reveals hundreds of organizations targeted by AI-powered Storm-0940
Microsoft teams reported that Storm-0940, which is believed to be linked to the Chinese state, targeted hundreds of organizations across various sectors in September using the AI-powered ARTEX framework. In some attacks, the shift from identifying targets to gaining privileged cloud access took less than three hours.
The Microsoft Security Research and Microsoft Threat Intelligence teams published an assessment that Storm-0940, which is believed to be linked to the Chinese state, targeted hundreds of organizations in September.
Microsoft said the attackers automated target identification and attack stages using the AI-powered ARTEX penetration-testing framework. In some incidents, they gained privileged access to organizations' cloud infrastructures.
The fact that some attacks took less than three hours from initial target identification to gaining privileged access indicates that they were conducted in an accelerated and automated manner.
Targeted sectors
The targeted sectors included aviation and defense, automotive, chemicals, energy, financial services, government, legal services, manufacturing, media, the military, semiconductors, software and technology.
Think tanks and nonprofit organizations were also among the targeted institutions.
ConnectWise breach
Microsoft assesses that Storm-0940 was responsible for the ConnectWise supply-chain breach disclosed to the public recently.
ConnectWise announced on October 16 that it was investigating unauthorized access attempts linked to the ConnectWise Cloud Backup environment.
Stay Updated with Ally Daily
Subscribe to be informed about special news, developments and announcements. We will keep you informed.
By signing up, you agree to our Privacy Policy
