Microsoft said that a China-linked hacking group had carried out a large-scale cyberattack using AI against hundreds of companies and organisations worldwide. The group allegedly exploited an AI agent called ARTEX, with activity intensifying since September.
Microsoft disclosed that a hacking group linked to the Chinese government had used AI to conduct a large-scale cyberattack targeting numerous companies and organisations worldwide. The attack was carried out by a hacking group known as Storm-0940, which exploits vulnerabilities using an AI agent called ARTEX. Since September, it has targeted a broad range of industries, including aerospace, defence and financial services.
The attack involved using AI to automate target reconnaissance and intrusion operations, with up to 2,900 login attempts per minute. In some cases, the attackers obtained critical administrative privileges within 3 hours. The large number of simultaneous attacks has been identified as a serious risk, as companies may be unable to respond quickly enough.
GMO Cybersecurity by IERAE released research on the 19th indicating that ARTEX may also have been involved in attacks in Japan. The series of reports does not clarify whether Storm-0940 included Japanese companies among its targets.