---
title: "China-aligned hackers used AI agent framework in ConnectWise supply chain attack"
url: https://www.parallelquant.com/posts/china-aligned-hackers-used-ai-agent-framework-in-connectwise-supply-chai-ba132b
source_name: "Tom's Hardware"
source_url: https://www.tomshardware.com/tech-industry/cyber-security/microsoft-says-china-aligned-hackers-used-ai-agents-in-connectwise-supply-chain-attack-agents-attempted-sign-ins-at-more-than-2-250-microsoft-365-tenants-with-some-of-the-groups-attacks-reaching-privileged-access-in-under-three-hours
published: 2026-10-23T10:30:00.000Z
topics: ["security", "agents"]
publisher: "Parallel Quant"
---

# China-aligned hackers used AI agent framework in ConnectWise supply chain attack

*2026-10-23 · Source: [Tom's Hardware](https://www.tomshardware.com/tech-industry/cyber-security/microsoft-says-china-aligned-hackers-used-ai-agents-in-connectwise-supply-chain-attack-agents-attempted-sign-ins-at-more-than-2-250-microsoft-365-tenants-with-some-of-the-groups-attacks-reaching-privileged-access-in-under-three-hours)*

Microsoft says the China-aligned group Storm-0940 used the ARTEX AI agent framework in a supply chain attack on ConnectWise Cloud Backup. The attack is described as massive in scope.

**Why it matters:** This is a documented case of state-linked actors putting agent frameworks into a supply chain operation, not just phishing text. It fits the pattern in Symantec's findings on hijacked agents and the Army's work on self-spreading agents: offensive use of agents is moving from experiment to routine tradecraft. Defenders of managed-service and backup vendors should assume faster, more automated intrusion tempo.

**Topics:** security, agents

---
Read the original: https://www.tomshardware.com/tech-industry/cyber-security/microsoft-says-china-aligned-hackers-used-ai-agents-in-connectwise-supply-chain-attack-agents-attempted-sign-ins-at-more-than-2-250-microsoft-365-tenants-with-some-of-the-groups-attacks-reaching-privileged-access-in-under-three-hours
Canonical: https://www.parallelquant.com/posts/china-aligned-hackers-used-ai-agent-framework-in-connectwise-supply-chai-ba132b
Published by Parallel Quant — https://www.parallelquant.com