China-Linked Hackers Exploit ConnectWise Supply Chain With AI Agents, Exposing Customer Cloud Environments
A China-linked group used AI-powered ARTEX agents and stolen ConnectWise Cloud Backup credentials to break into customer cloud environments, researchers say. The campaign, tied to threat actor Storm-0940, turns a routine IT backup tool into a supply-chain entry point and shows how offensive cyber teams are already weaponizing AI for access and persistence.
A China-linked hacking group has quietly turned a popular IT backup service into a springboard into corporate clouds, combining stolen credentials with AI-powered tools in a way that shows where offensive cyber operations are heading.
Security researchers report that attackers tied to the group tracked as Storm-0940 used so-called ARTEX AI agents to abuse stolen credentials for the ConnectWise Cloud Backup application. By compromising that single piece of software, they gained access to customer cloud environments downstream—a classic supply-chain move, but with a new layer of automation and adaptability provided by AI.
ConnectWise Cloud Backup is widely used by managed service providers and IT departments to safeguard business data. That makes it a high-value target: whoever controls the backup system often has privileged visibility into servers, file stores, and sometimes authentication workflows. In this campaign, once Storm-0940 obtained valid credentials for the backup app, the group’s AI agents systematically probed connected cloud resources, escalated access, and quietly exfiltrated data.
The use of ARTEX AI agents is the detail that shifts this case from another credential-theft story to a glimpse of the next cyber arms race. Rather than relying solely on static scripts, the attackers deployed AI components that could adapt to different environments, interpret responses, and decide which paths offered the best chance of persistence and lateral movement. That kind of tooling can turn one set of leaked credentials into a multi-tenant breach at machine speed.
For affected organizations, the exposure is serious and difficult to fully map. Customers whose cloud environments were accessible through the compromised ConnectWise instances face the possibility that not only data but also configurations, keys, and internal workflows were observed or copied. Because backup systems touch sensitive repositories by design, a breach at that layer can cascade into compliance failures, intellectual property loss, and long-running espionage that is hard to detect.
The campaign underscores how supply-chain attacks have evolved since headline-grabbing intrusions earlier in the decade. Rather than tampering with software updates, Storm-0940 appears to have focused on stealing and abusing credentials linked to a trusted service, then handing the work of environment exploration to AI agents. That approach is quieter and more flexible. It also exploits the reality that many organizations grant their backup tools broad, sometimes poorly audited, permissions.
Attribution of cyber operations is always contested, but major vendors have assessed this activity as linked to a China-based threat cluster based on infrastructure, tool overlap, and targeting patterns. That fits a broader picture of Chinese state-linked groups focusing on long-term access to cloud and managed-service environments used by Western governments and companies, aiming to build footholds that could be leveraged for intelligence collection or, in a crisis, for disruption.
For IT teams and executives, the lesson is blunt: in a world of AI-enabled offense, identity and supply-chain trust become both the lock and the crowbar. Compromising a single service that sits at the center of many customers’ environments gives attackers enormous leverage, and AI agents let them exploit it without needing large human teams.
A useful way to think about this shift is that defenders are no longer just facing a human adversary writing scripts; they are facing an adaptive system that can learn the quirks of each environment it lands in and keep trying doors until something opens.
Signals to watch next include whether ConnectWise and its partners roll out new security controls and telemetry for Cloud Backup, how many organizations disclose related breaches, and whether regulators move to tighten disclosure and baseline security standards for managed-service and backup providers. On the threat side, security researchers will be looking for ARTEX-like AI tools appearing in other campaigns, which would suggest this is not a one-off but the start of a broader operational model.
Sources
- OSINT