Microsoft says China-aligned hackers accessed ConnectWise customers using AI agents
Microsoft said China-aligned hackers used stolen ConnectWise credentials and AI agents in attempted access to about 2,250 organizations.
Microsoft researchers said attackers who breached ConnectWise's cloud backup service stole credentials used to link the company with customers' Microsoft-hosted environments. TechCrunch reported that the credentials could be used to access customer email and files.
Microsoft attributed the activity to China-aligned hackers and said they used AI agents to automate roughly 3,000 attempted sign-ins per minute. The company's findings describe the scale and method of the intrusion.