# Microsoft says China-linked hackers used AI tool ARTEX in global cyberattacks

Digest AI · Policy & Regulation · published 2026-10-24T17:00:00Z

Canonical: https://digestai.news/story/microsoft-says-china-linked-hackers-used-ai-tool-artex-in-global-cyber

## Summary

Microsoft reported on Oct. 21 that a China state-aligned hacking group, Storm-0940, used the AI tool ARTEX to accelerate cyberattacks against hundreds of organizations worldwide. The attackers compromised credentials for ConnectWise’s Cloud Backup application, allowing them to attempt access to over 2,250 customer cloud environments. In some cases, they gained privileged access in under three hours. Microsoft said the AI-assisted automation enabled rapid scanning and exploitation, though successful access did not necessarily mean data theft. ConnectWise confirmed the breach but said its backup archives remained encrypted and unaffected. The ARTEX developer, known as Autumn-27, condemned the misuse and said the tool would become closed-source and stop public updates.

## Key points

- Storm-0940 used ARTEX to attack hundreds of organizations globally
- Over 2,250 customer cloud environments were targeted via compromised ConnectWise credentials
- ARTEX developer Autumn-27 denied involvement and said the tool will go closed-source

## Why it matters

The use of AI to automate cyberattacks marks a significant escalation in threat speed and scale, reducing response time for defenders and highlighting risks of dual-use AI tools in security.

## Sources

1. [China-Linked Hackers Used AI Tool in Global Cyberattacks, Microsoft Says](https://theepochtimes.com/china/china-linked-hackers-used-ai-tool-in-global-cyberattacks-microsoft-says-6108643) (theepochtimes.com, 2026-10-24)

Part of the developing story: [Global AI Threats Spark International Scrutiny](https://digestai.news/thread/microsoft-says-storm-0940-used-ai-driven-artex-framework-in-attacks) (3 stories)

## Cite

Digest AI, "Microsoft says China-linked hackers used AI tool ARTEX in global cyberattacks", 24 October 2026, https://digestai.news/story/microsoft-says-china-linked-hackers-used-ai-tool-artex-in-global-cyber

---

Written by Digest AI's editorial model from the linked sources; the sources are the record. Headlines, digests and key points are written by Digest AI and may be quoted with a link to the story page. Linked articles belong to their publishers. Terms: https://digestai.news/terms#reuse
JSON: https://digestai.news/story/microsoft-says-china-linked-hackers-used-ai-tool-artex-in-global-cyber.json