Microsoft links Storm-0940 to AI-driven attacks using ARTEX framework

A China state-aligned group reportedly used an AI pen-testing tool to go from initial access to privileged cloud control in under three hours Microsoft says a China state-aligned hacking group handed much of its job to an AI system. Based on the results, the system was a fast learner. In a report released October 21, 2026, Microsoft Threat Intelligence tied the threat actor it tracks as Storm-0940 to a sprawling campaign run through ARTEX, an AI-driven penetration-testing framework. In some incidents, the group reportedly moved from a first foothold to elevated cloud privileges in less than three hours. ARTEX takes the penetration-testing concept and automates it with AI. According to Microsoft’s findings, Storm-0940 used it to run several attack phases on autopilot, including reconnaissance and exploitation, across hundreds of organizations.

BeCrypto News shows a short excerpt and links to the publisher. The full report belongs to Crypto Briefing.