Chinese Hackers Used AI to Spy on Thousands of Companies

Chinese government-backed hackers spied on thousands of companies by breaking into ConnectWise, a firm that provides cloud backup and remote access services. ConnectWise is like a digital vault for companies—it stores their data and lets employees access it remotely. The hackers stole application credentials, which are like digital keys that allow ConnectWise to connect to its customers' Microsoft environments. With these keys, the hackers could log in as if they were authorized users and read emails and files. Microsoft says the hackers used AI tools to automate the attack, attempting nearly 3,000 sign-ins per minute across 2,250 organizations. That speed is faster than humans can react, giving defenders little time to detect and stop the breach.

The attack highlights a growing trend: hackers are using AI to scale up their operations. The AI framework used, called ARTEX, is open-source and designed to stress-test cyber defenses, but it can be misused. The same tool was recently used to compromise South Korea's financial systems, where weak security and lack of multi-factor authentication made it easier. ConnectWise has paused its cloud backup system and is working to restore it. This incident is a wake-up call for all companies to strengthen their security, especially by enabling multi-factor authentication, which adds an extra layer of protection beyond just a password.

For everyday people, this breach is a reminder that the companies we trust with our data are constantly under attack. If you use services that rely on ConnectWise, your information could be at risk. It's always good practice to use strong, unique passwords and enable two-factor authentication wherever possible. Companies need to step up their defenses, and individuals should stay informed about breaches that might affect them. The use of AI in cyberattacks is likely to increase, so staying vigilant is more important than ever.