Microsoft Security — AI-Driven, Large-Scale Nation-State Campaign Using ARTEX Enables Supply Chain Compromise

Publication date: October 21, 2026
Category: Supply chain attacks (realtime trigger)

Introduction

Researchers at Microsoft Security have disclosed a sophisticated, large-scale campaign active since September 2026 by the China-state aligned threat actor known as Storm-0940. This activity represents a critical evolution in advanced persistent threat (APT) operations by integrating an autonomous agentic AI penetration testing framework called ARTEX. The actor leveraged this tooling to automate simultaneous attacks against hundreds of organizations globally across diverse industries, in several instances achieving privileged access to enterprise cloud infrastructure in less than three hours and successfully compromising multi-tenant applications within the ConnectWise supply chain.

What is ARTEX and the Supply Chain Incident? (General Analysis)

ARTEX is an open-source penetration testing framework built around multi-agent Large Language Model (LLM) systems, written in Go with a Next.js frontend. The system is engineered to execute end-to-end penetration tests autonomously—ranging from initial reconnaissance to data exfiltration—with minimal human intervention while aggregating discovered assets and vulnerabilities into an internal graph structure.

In this incident, Storm-0940 used ARTEX to exponentially scale its offensive workflows, enabling coordinated attacks executed at machine speed. The primary operational impact centered on the ConnectWise cloud backup ecosystem, where the actor weaponized compromised OAuth application credentials to authenticate directly into customer Microsoft 365 environments, bypassing interactive user sign-ins and exploiting pre-established trust relationships between applications and tenant environments.

While this incident is not tied to a traditional vulnerability assigned a CVE identifier within Microsoft systems, the associated risk vector aligns with the following technical estimations:

  • Estimated CVSS Vector: CVSS v3.1 9.8 (Critical) AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
  • Estimated CWE Classification: CWE-284 (Improper Access Control) and CWE-913 (Improper Control of Dynamically-Managed Code Resources / API Abuse).

How Does It Work? (Technical Analysis)

The attack mechanism is characterized by high-volume automation driven by autonomous intelligent agents, structured across distinct operational phases:

  • Initial infection flow and reconnaissance: Between October 10 and 14, 2026, Storm-0940 infrastructure (anchored at IP 144.172.64[.]99) executed an automated cross-tenant password-spraying campaign targeting 327 accounts across eight organizations to gain unauthorized access to Microsoft 365 and Exchange Online. Telemetry captured over 151,000 failed logon events, peaking at 2,900 failures per minute. Immediately following this activity, reports of the ConnectWise cloud backup application compromise surfaced.
  • OAuth app abuse and machine-speed operations: After acquiring control of ConnectWise cloud application identities, ARTEX AI agents scaled their reach to more than 2,250 tenants at a rate of 2,900 sign-in attempts per minute. The applications utilized stolen access tokens to authenticate into target environments, effectively abusing the trust inherent to existing service principals.
  • Persistence, lateral movement, and Microsoft Graph manipulation: Operating via Microsoft Graph, the agents performed follow-on activities including directory reconnaissance, application credential modifications to establish persistent backdoors, and self-assignment of highly privileged roles such as Global Administrator within victim tenants.

Affected Systems / Environments

The campaign impacted organizations across a wide spectrum of global industries, including aerospace and defense, automotive, chemicals, energy, financial services, government, legal, manufacturing, media, military, semiconductors, software, technology, and think tanks and non-profits.

Specific software components and cloud integrations targeted include:

  • ConnectWise Cloud Backup (App ID: 506e08f9-6e9a-4da4-942b-a099a03644ae)
  • ConnectWise - MS Teams (App ID: 24205314-2b89-4e07-a2a4-579e898a5640)
  • ConnectWise - MS Graph (App ID: 0de14c77-b9b0-4137-9360-34878a929827)
  • SkyKick Partner Portal (App ID: c921256f-04a7-44e8-9b2a-69c33929ba19)

Mitigation and Detection

Remediation

Organizations must immediately execute the following containment and recovery steps:

  • Keep affected ConnectWise application connections disabled until the vendor provides formal restoration instructions.
  • Avoid deleting enterprise applications as a knee-jerk reaction; preserve configuration settings and forensic evidence prior to making irreversible changes.
  • Inventory the specified application IDs and record local service-principal Object IDs across every tenant.
  • Review Microsoft Entra audit logs for application credential additions, new service principal creation, consent grants, and privileged role assignments.
  • Rotate compromised credentials and revoke unnecessary permissions once malicious activity is confirmed.

Detection

Defensive teams should hunt for Indicators of Compromise (IoCs) within audit trails and network telemetry:

  • Associated malicious IP addresses: 144.172.64[.]60, 144.172.64[.]99, 144.172.64[.]128.
  • Suspicious User-Agents: Python-urllib/3.12, python-requests/2.31.0, python-requests/2.34.2, curl/7.88.1, azure-toolkit/1.0.

Defensive Intelligence Note: The execution speed introduced by agentic AI drastically compresses defender response windows. Correlating service principal sign-ins with subsequent Microsoft Graph API requests is critical to detecting automated operational anomalies.

To audit tenant exposure to affected applications using Advanced Hunting in Microsoft Defender XDR, utilize the following KQL query:

kql 
let ConnectWiseApps = dynamic([
    "506e08f9-6e9a-4da4-942b-a099a03644ae", // ConnectWise Cloud Backup
    "24205314-2b89-4e07-a2a4-579e898a5640", // ConnectWise - MS Teams
    "0de14c77-b9b0-4137-9360-34878a929827", // ConnectWise - MS Graph
    "c921256f-04a7-44e8-9b2a-69c33929ba19" // SkyKick Partner Portal
]);
OAuthAppInfo
| where OAuthAppId in (ConnectWiseApps)
| project AppName, OAuthAppId, ServicePrincipalId, AppStatus, PrivilegeLevel, IsAdminConsented

Wrapping Up

Storm-0940’s deployment of the ARTEX framework marks a watershed moment in the weaponization of autonomous artificial intelligence for state-sponsored cyber operations. By accelerating offensive workflows to speeds unattainable by human operators, the adversary successfully compromised multi-tenant application supply chains like ConnectWise and escalated privileges across thousands of cloud environments in mere hours. Effective defense demands rigorous visibility over application authentication, strict monitoring of Microsoft Graph telemetry, and rigorous adherence to the principle of least privilege for OAuth permissions.

References

  • ConnectWise Trust Center – Cloud Backup advisories. ConnectWise.
  • ConnectWise Cloud Backup technical investigation and remediation guide. ConnectWise.
  • Huntress. (2026). October SkyKick. Huntress.
  • Microsoft Security. (2026). AI-driven, large-scale nation-state campaign using ARTEX enables supply chain compromise. Microsoft Security Blog.