# Microsoft Ties AI Hacking Tool to ConnectWise Breach Hitting Microsoft 365

- URL: https://usa-24.com/artex-ai-hacking-tool-microsoft-365/
- Publisher: USA 24
- Section: Artificial Intelligence (AI)
- Published: 2026-10-22T01:13:05.193Z
- Updated: 2026-10-22T01:13:05.199Z
- Topics: ARTEX, Storm-0940, ConnectWise, Microsoft 365, AI Security, Cyberattacks

> Microsoft says China-linked Storm-0940 used the ARTEX agentic AI framework to automate attacks on Microsoft 365 tenants tied to the ConnectWise Cloud Backup compromise.

## Key takeaways

- Microsoft says Storm-0940 used the ARTEX agentic AI framework in attacks that reached more than 2,250 Microsoft 365 tenants, tied to the ConnectWise Cloud Backup compromise.
- The ConnectWise breach began with a stolen application credential and abused permissions customers had already granted, including Directory.ReadWrite.All.
- ConnectWise disabled seven application identities at 07:00 UTC on October 17, 2026, and Cloud Backup remains suspended with no announced restore date.
- Huntress confirmed unauthorized sign-ins in 162 Microsoft 365 tenants and later found almost 1,000 tenants with sign-in activity from the attacker's address.
- Disabling an app does not undo changes already made, so administrators should audit Entra logs for credentials added since October 13 and review sign-ins from 144.172.64.128.

Microsoft says a China-state-aligned actor used the ARTEX AI hacking tool, an agentic penetration-testing framework, to automate attacks that reached more than 2,250 Microsoft 365 tenants. The actor, which Microsoft tracks as Storm-0940, used ARTEX to speed up a supply-chain compromise tied to ConnectWise Cloud Backup, the service formerly known as SkyKick. Microsoft published its [attribution on its security blog](https://www.microsoft.com/en-us/security/blog/2026/10/21/storm-0940-uses-artex-agentic-ai-connectwise-supply-chain-compromise/) on October 21, 2026. As far as we can see, it is the first public link between an AI attack framework and the ConnectWise breach.

## What Microsoft says Storm-0940 did

Microsoft says Storm-0940 was using ARTEX as early as September 2026. The actor targeted hundreds of organizations around the world across a broad range of industries.

ARTEX is a system of large language model agents that run a penetration test from reconnaissance through data exfiltration with little human input, according to [BleepingComputer's report](https://www.bleepingcomputer.com/news/security/hackers-breach-microsoft-365-tenants-via-connectwise-supply-chain-attack/). That automation matters because it lets a small team of operators work many targets at once.

Several of these attacks gave the actor privileged access to an organization's cloud infrastructure. In multiple cases, less than three hours passed between the first targeting and privileged access. That window leaves defenders very little time after the first alert.

One operation Microsoft describes ran from October 10 to 14 and targeted 327 accounts by abusing OAuth application identities. [CryptoBriefing](https://cryptobriefing.com/microsoft-storm-0940-artex-ai-attacks/) reports that Storm-0940 activity dates back to at least 2021, though that detail rests on a single outlet.

Microsoft is clear about one point. The activity did not result from a compromise of, or a vulnerability in, Microsoft's corporate systems, products or services. The company also says that finding an affected application or a successful authentication does not necessarily mean customer data was accessed or exfiltrated.

## How the ConnectWise Cloud Backup breach reached Microsoft 365

The ConnectWise incident started with a stolen application credential, not a user password. Attackers hijacked the application's own identity inside Microsoft 365 and signed in without a password or a multi-factor prompt, according to [The Hacker News](https://thehackernews.com/2026/10/connectwise-suspends-cloud-backup-after.html).

The attackers also rode on permissions that customers had already approved. [SpecterOps](https://specterops.io/blog/2026/10/17/connectwise-skykick-breach-microsoft-365/) notes that the abused access included Directory.ReadWrite.All, a broad permission. The breach did not need a new hole. It needed only the access that customers had already handed to the app.

The timeline is tight. Malicious activity started at least on October 15 from a single IP address, [BleepingComputer reported](https://www.bleepingcomputer.com/news/security/hackers-breach-microsoft-365-tenants-via-connectwise-supply-chain-attack/). ConnectWise disabled the seven ConnectWise application identities listed in its technical guidance at 07:00 UTC on October 17, 2026, as stated on its [advisories page](https://www.connectwise.com/company/trust/advisories).

ConnectWise acquired SkyKick in September 2024, along with the BCDR provider Axcient. Cloud Backup is now suspended. [Techzine reports](https://www.techzine.eu/news/security/145071/connectwise-shuts-down-cloud-backup-after-hack-on-microsoft-365-tenants/) that backups were not running and restores were unavailable for customers during the suspension, and that it is still unclear when services will resume. ConnectWise says it has no evidence that the backup archives have been accessed.

## How many Microsoft 365 tenants were hit

The tenant counts vary by source, so the numbers in circulation need context. The table below lists the main figures and what each one measures.

| Source | Figure | What it measures |
|---|---|---|
| Microsoft, as quoted by CyberScoop | More than 2,250 tenants reached | Tenants reached by ARTEX-driven activity, at 2,900 sign-in attempts per minute |
| Huntress, as reported by iTnews | 162 confirmed tenants | Unauthorized sign-ins confirmed |
| Huntress, later analysis | Almost 1,000 tenants | Sign-in activity from the attacker's address, with about 300 sign-ins succeeding |
| The Hacker News | 173 tenants | Figure cited in some coverage |

No source has published a reconciliation of these figures. Reached, confirmed and active are different measures, and a reader should not treat them as interchangeable. The scope of the "hundreds of organizations" beyond Microsoft 365 has not been itemized either.

## What to check in your Microsoft 365 tenant now

Microsoft's guidance focuses on service principal sign-ins. These identities often hold broad permissions, which makes them a quiet but valuable target. Administrators, and managed service providers responsible for several customers, can start with these steps, drawn from vendor and researcher guidance:

- Confirm whether your tenant has a ConnectWise or SkyKick application connection, and check Entra ID enterprise applications for the identities listed in ConnectWise's technical guidance.
- Disable affected ConnectWise or SkyKick apps without deleting them, so the records remain available for investigation.
- Audit Entra logs for credentials added since October 13. New credentials can keep access alive after an app is disabled.
- Review sign-ins for activity from 144.172.64.128, the address cited in the research guidance.
- Run Microsoft Defender XDR hunting queries for suspicious Microsoft Graph activity.
- Review changes already made inside the tenant. Disabling an app does not undo them, and previously issued tokens may stay usable until they expire.

A clean sign-in log does not prove a tenant is safe. Earlier tokens and changes can persist after the first fix.

## Why the AI angle changes the attack math

The AI element is mostly about speed and volume. A human operator working through reconnaissance, credential abuse and privilege escalation needs days. Microsoft's reporting describes cases where the sequence finished in under three hours, which suggests the agents handled each step without waiting for a person.

USA 24 recently covered a different [AI agent case](https://usa-24.com/ai-agents-hack-websites/), in which a hacker's agents breached more than 100 company websites for about $5,000. That operation targeted websites. This one targets identity and cloud permissions, which carry far more reach inside a company.

The defensive picture is also different. USA 24 has reported on [Microsoft's new risk scores and kill switches for rogue AI agents](https://usa-24.com/microsoft-ai-agent-controls/). Controls aimed at rogue agents inside a company's own environment do not, by themselves, stop an outside actor from abusing an app identity a customer already approved.

The winners in this incident are the attackers, who needed only existing permissions. The losers are the managed service providers and their customers, who face possible cleanup work and, for now, no restore path for Cloud Backup.

## What to watch next

Several questions remain open. Microsoft and ConnectWise both say the evidence is not conclusive on whether customer data was accessed or exfiltrated. Whether ConnectWise restores Cloud Backup, and when, is also unknown.

Some claims about ARTEX are unverified. CryptoBriefing reports that the framework was released in July 2026 for legitimate security testing and went closed-source in October after reported misuse, but that comes from one outlet. FourWeekMBA reports that CrowdStrike said on October 7 that an attacker targeting South Korean financial organizations used ARTEX, and that detail also needs independent confirmation.

In the coming weeks, watch for a reconciled tenant count, a restore timeline from ConnectWise, and any published indicators from Microsoft or Huntress. If Storm-0940 keeps pairing agents with identity abuse, defenders should expect more intrusions that move from first contact to privileged access in hours.

## Frequently asked questions

### Is my Microsoft 365 tenant hacked?

Microsoft says that finding an affected application or a successful authentication does not necessarily mean customer data was accessed or exfiltrated. Check whether you have a ConnectWise or SkyKick app connection, audit Entra logs for credentials added since October 13, and review sign-ins from 144.172.64.128. If you find suspicious changes, treat them as a possible compromise and get help from your security team.

### Is ConnectWise Cloud Backup back online?

As of this report, no restore date has been announced. Techzine reported that it is still unclear when services will resume. During the suspension, backups were not running and restores were unavailable for customers.

### What is the ARTEX AI hacking tool?

ARTEX is described as a system of large language model agents that run a penetration test from reconnaissance through data exfiltration with little human input. Reports conflict on whether it is open source or closed source, and one outlet says it was released in July 2026 for legitimate security testing. Those details remain unverified.

### Did the attack compromise Microsoft itself?

No, according to Microsoft. The company says the activity did not result from a compromise of, or a vulnerability in, its corporate systems, products or services. The affected accounts were customer tenants that had connections to ConnectWise applications.

## Sources

1. [AI-driven, large-scale nation-state campaign using ARTEX enables supply chain compromise](https://www.microsoft.com/en-us/security/blog/2026/10/21/storm-0940-uses-artex-agentic-ai-connectwise-supply-chain-compromise/)
2. [Microsoft pins ConnectWise supply-chain attack to China-state aligned threat group](https://cyberscoop.com/microsoft-attributes-connectwise-supply-chain-attack-china-storm-0940/)
3. [Microsoft links Storm-0940 to AI-driven attacks using ARTEX framework](https://cryptobriefing.com/microsoft-storm-0940-artex-ai-attacks/)
4. [Hackers breach Microsoft 365 tenants via ConnectWise supply-chain attack](https://www.bleepingcomputer.com/news/security/hackers-breach-microsoft-365-tenants-via-connectwise-supply-chain-attack/)
5. [ConnectWise shuts down Cloud Backup after hack on Microsoft 365 tenants](https://www.techzine.eu/news/security/145071/connectwise-shuts-down-cloud-backup-after-hack-on-microsoft-365-tenants/)
6. [Trust Center (ConnectWise advisories)](https://www.connectwise.com/company/trust/advisories)
7. [ConnectWise SkyKick Breach: How to Check Your Microsoft 365 Tenant](https://specterops.io/blog/2026/10/17/connectwise-skykick-breach-microsoft-365/)
8. [Stolen ConnectWise 'SkyKick' credential exposed Microsoft 365 tenants](https://www.itnews.com.au/news/stolen-connectwise-skykick-credential-exposed-microsoft-365-tenants-629721)
9. [ConnectWise Suspends Cloud Backup After Attackers Compromise Microsoft 365 Tenants](https://thehackernews.com/2026/10/connectwise-suspends-cloud-backup-after.html)
10. [AI Daily: Microsoft Logs AI-Run Attack on 2,250 Tenants](https://fourweekmba.com/ai-daily-roundup-21-oct-2026-ai-run-attack-2250-tenants/)