What happened?
Microsoft announced that China-linked hackers used an AI-powered tool to target hundreds of organizations through ConnectWise. The company said persistent access was gained on some systems.
What is ConnectWise?
ConnectWise is a platform that lets IT service providers (MSPs) remotely manage customer systems. Because such tools can provide access to many organizations from a single point, they can be attractive targets for attackers.
AI-assisted attack
According to the disclosure, the attackers used an AI-powered tool to automate the campaign. Microsoft did not specify the exact scope or the number of affected organizations, but said hundreds were targeted.
Risk of persistent access
Persistent access on some systems means attackers could remain undetected in networks for extended periods. Experts recommend that organizations using ConnectWise review access logs and investigate suspicious activity.
