ConnectWise
- TYPE
- Company
- SIGNALS
- 7
- FIRST SEEN
- Oct 22, 2026
- LAST SEEN
- Oct 23, 2026
Profile
ConnectWise is an IT services firm, according to Reuters as summarized by Techmeme, and its Cloud Backup application was the subject of a supply chain compromise reported in October 2026.[1][2] On October 22, 2026, Microsoft attributed the compromise to Storm-0940, a China state-aligned threat actor.[3][2] Microsoft said the group compromised a ConnectWise cloud backup application and used stolen credentials against more than 2,250 Microsoft 365 tenants.[3] According to Microsoft, the actor used ARTEX, an agentic AI penetration testing framework, to automate its attacks on hundreds of organizations.[3][4][1] Microsoft said that in some cases the group gained privileged cloud access less than three hours after first targeting a victim.[3]
Compiled from Frontier signals. Each statement links to the signal it comes from.