Chinese AI Hackers Breach ConnectWise to Spy on 2,250 Firms: Supply Chain Risks for Startups

Chinese state-aligned hackers breached the cloud backup service of IT management firm ConnectWise and used stolen credentials to spy on thousands of companies.

Security researchers tracked the activity to the group Storm-0940 which gained access to customer Microsoft environments including emails and files.

AI Tools Speed Up Cyber Attacks on Supply Chains

The attackers relied on an open-source AI framework called ARTEX to launch thousands of sign-in attempts per minute across more than 2,250 organizations.

This rapid pace left little time for defenders to spot or stop the intrusions before data was accessed.

Similar AI-driven methods appeared earlier in attacks on South Korean financial systems showing a growing pattern of automated threats.

Founders who rely on third-party IT tools now face higher risks of indirect breaches through trusted vendors.

Long-Term Outlook for Startup Security

Over the next 12 months companies may see more AI-accelerated supply chain attacks as tools like ARTEX become easier to use.

Smaller firms without dedicated security teams could lose the most if they do not review vendor access and enable extra protections.

Security vendors stand to gain as demand rises for better monitoring of application credentials and unusual sign-ins.

Historical attacks like SolarWinds prove that one compromised provider can expose many downstream businesses at once.

Operators should treat this incident as a reminder to limit permissions on third-party apps and monitor for unexpected changes in their cloud setups.