中國黑客入侵 ConnectWise 後監視數千家公司
Chinese hackers spied on thousands of companies after breaching IT giant ConnectWise
Microsoft 表示，與中國政府立場一致的黑客入侵 ConnectWise 雲端備份服務並竊取應用程式憑證，隨後利用 AI 智能體攻擊約 2,250 個組織。攻擊使用開源 AI 框架 ARTEX，登入嘗試速度接近每分鐘 3,000 次；Microsoft 指出，防守方幾乎沒有時間偵測和回應。ConnectWise 已暫停雲端備份系統的存取並調查事件，截至週四正着手恢復服務。
事件呈現 AI 智能體如何加快憑證遭竊後的企業入侵，Microsoft 指出每分鐘近 3,000 次登入嘗試令防守方偵測和回應時間有限。
In Brief
Posted:
9:47 AM PDT · October 22, 2026
The bad week for cybersecurity just got worse for thousands more companies, who were spied on by Chinese hackers following the breach of IT management and remote access giant ConnectWise.
Security researchers at Microsoft say the China state-aligned hackers broke into ConnectWise’s cloud backup service and stole application credentials that are used to establish data links between ConnectWise and its corporate customers, who rely on the cloud service to backup their company’s data.
By stealing the credentials, the hackers could log in to the customer’s Microsoft-hosted environment as if they were an authorized user and access their emails and other files.
According to Microsoft, the hackers used AI agents to rapidly hack into around 2,250 organizations at a rate of almost 3,000 attempted sign-ins per minute. Microsoft said this speed gives defenders “little time to detect and respond.”
The speed of the mass-hacks were attributed to the use of AI agents, specifically ARTEX, an open-source AI framework that works with AI models to stress-test cyber defenses. The same AI software was used in a recent compromise of South Korea’s financial systems, many of which had weak security and lacked multi-factor authentication.
ConnectWise said it’s paused access to its cloud backup system and is investigating the breach. As of Thursday, the company said it was working on restoring the service.
來源：TechCrunch · AI · techcrunch.com