Microsoft has identified the threat actor group known as Storm-0940 in connection with a supply chain attack targeting ConnectWise. According to reports, the actor utilized an AI-enabled penetration-testing tool to automate and scale its operations.
The campaign resulted in the compromise of more than 2,200 individual tenants. The use of automated, AI-driven tools reportedly allowed the attackers to accelerate their activities during the intrusion. Further details regarding the specific mechanisms of the AI-enabled tool and the timeline of the incident remain limited.
Source: Dark Reading
Original article: https://www.darkreading.com/cyberattacks-data-breaches/microsoft-storm-0940-connectwise-supply-chain-attack
Leave a Reply