Chinese hackers target hundreds of organizations in AI-powered ConnectWise breach

Microsoft says a group of hackers with ties to China deployed an AI-powered penetration testing tool to breach ConnectWise as part of a global operation targeting hundreds of organizations. ConnectWise’s own CEO, Manny Rivelo, also released a statement saying that all signs point to China-backed hackers for the attack on their Cloud Backup system. After initially detecting the attack, ConnectWise immediately suspended access to its Cloud Backup, SaaS Security, and Cloud Management services. Rivelo has since confirmed that the threat is contained and is now bringing services back online using a phased, highly managed approach. He, however, warned that while these steps secure ConnectWise, they do not clear the backdoors in already-compromised individual customer networks, meaning there must be separate security checks.

BeCrypto News shows a short excerpt and links to the publisher. The full report belongs to Cryptopolitan.