Microsoft Links Storm-0940 to ConnectWise Supply Chain Attack

Microsoft has identified the group Storm-0940 as being responsible for a supply chain attack on ConnectWise. The attack targeted over 2,200 tenants and was carried out by a China-linked actor. This actor utilized an AI-enabled penetration-testing tool to automate and speed up the attack. The tool's use allowed for increased efficiency in the attack's execution. The attack's scope and use of advanced tools suggest a sophisticated operation.