AI Agents Accelerate Massive Supply Chain Breach in Microsoft Ecosystem

An autonomous AI framework has dramatically compressed the timeline for one of the largest supply chain attacks seen in recent years. According to Microsoft, a China-state-aligned threat actor known as Storm-0940 utilized the open-source agentic system ARTEX to launch a coordinated assault via ConnectWise.

The first major takeaway is the sheer scale and speed of the initial intrusion. After gaining unauthorized access to the multi-tenant ConnectWise application, the attackers attempted sign-ins at more than 2,250 Microsoft 365 tenants. By leveraging stolen application credentials that required no interactive user sign-in, the group moved with unusual velocity. In several instances, the operation reached privileged access levels less than three hours after the initial targeting began.

The second key development involves the automated nature of the reconnaissance and credential attacks. The AI agents conducted password spraying across 327 accounts in eight organizations, resulting in over 151,000 failed logons. At its peak on October 11, the system executed 2,900 attempts per minute. This automated approach allowed the agents to work continuously with minimal human interaction, leaving defenders with little time to detect and respond to the sweeping activity.

The third critical point highlights the specific operational impact within affected tenants. Using four application credentials, the attackers generated more than 200 sign-ins in under four minutes from the same IP range. Within some environments, the agents performed directory operations, changed app credentials, and modified privileged roles. In one notable incident on October 15, an app assigned itself to the top administrator role, a behavior that triggered specific alerts from Microsoft Defender.

Contextually, Storm-0940 has been active since 2021 and targets industries including aerospace, defense, semiconductors, and government. The attack did not stem from a vulnerability in Microsoft’s own systems but rather from the compromise of a third-party application. Security firm Huntress confirmed unauthorized sign-ins for 162 tenants by October 16, a number that grew to nearly 1,000 Entra tenants with sign-in activity from the attacking IP the following day.

Looking ahead, the incident underscores the rising threat of AI-driven penetration testing. While ARTEX’s developer has announced the project will become closed source, the technology is being used by actors in multiple regions, including those linked to breaches at South Korean financial institutions. ConnectWise has suspended several services as a precaution and begun a phased restoration process. Microsoft advises customers to keep affected app connections disabled and review recent logs until formal restoration instructions are issued.