# Chinese-linked hackers compromise ConnectWise, target hundreds in global attack, Microsoft says

> **Open Intelligence Dossier** · First detected: 2026-10-22 13:20 UTC · Category: Business

## Executive Summary
Chinese-linked hackers compromise ConnectWise in a global AI-driven supply chain attack, according to Microsoft and reports.

## Intelligence Brief
Recent coverage from Reuters, Microsoft, CyberScoop, The Hacker News, The Information, and CRN details a major cybersecurity incident involving a Chinese-state aligned threat group. According to these outlets, the hackers have compromised ConnectWise and targeted hundreds of entities in a global cyberattack. The operation specifically involves a ConnectWise supply-chain attack and a ConnectWise cloud backup breach, prompting immediate concern across the technology sector. Reporting from Microsoft and specialized outlets highlights the technical nature of the campaign, noting that the threat actors utilized ARTEX AI agents.


The Information and The Hacker News emphasize that this represents an AI-driven, large-scale nation-state campaign using ARTEX to enable the supply chain compromise. In response to these warnings, managed service providers are actively scrambling to determine Microsoft 365 tenant impact stemming from the cloud backup breach. While the coverage does not yet specify the complete list of all hundreds of targeted entities, it clearly establishes the foundational context of a sophisticated, AI-powered nation-state operation. The involvement of ARTEX AI agents marks a notable technological development in how state-linked threat groups execute supply chain compromises against widely used software infrastructure like ConnectWise.


As the situation develops, stakeholders and observers will need to monitor further updates from Microsoft, security researchers, and affected service providers. Coverage does not yet specify the full remediation timeline or the complete scope of remediation efforts required for the hundreds of organizations targeted in the global attack.

## Multi-Source Evidence Table
| Source Outlet | Headline | Verification URL |
|---|---|---|
| TechCrunch | Chinese hackers spied on thousands of companies after breaching IT giant ConnectWise | [Source Link](https://news.google.com/rss/articles/CBMiuwFBVV95cUxQbEhXMGVnYldDOTRDM0FqaGRFT0pYelRtR3QzbFBaQzNNMnJUdW5mVzU2YTcyY0NiWHJSc25zSEVtOGFBMEtZYWo3OGdjTXg1Q2J1X1lPLTZQb2JxY3lHemJ0WVU1dE5JdzUyV293ekc0YnZ6WVpfWUREVnRCX0Q3NksyMlJiMUxHZ3ZnNng5WG5DUTRGdnlMbzJmZTByVzJPOGF2QldzQUtIWDhzWmk0VVVnZUFtRm9yMTVR?oc=5) |
| CyberScoop | Microsoft pins ConnectWise supply-chain attack to China-state aligned threat group | [Source Link](https://news.google.com/rss/articles/CBMimAFBVV95cUxQRE83d3BnWTRGLVJlcjRYaG03SzBVLUF4eDcwdXd2b29IUnBKWkJkTGRTUjNFX2ZWUnRmRXpBXzZxZzdZZ3RNa2Y1M2RyUXhWUXlnclgyeGdfRmVLeUQxZ3dZLS1vMkt2ZFgtdE1TY24yYVgxWlh3d05KWFNYblA0Qmp3ajdXSEhfUzkxYW01RmhOWlRWYmhaXw?oc=5) |
| The Hacker News | China-Linked Hackers Use ARTEX AI Agents in ConnectWise Supply Chain Attack | [Source Link](https://news.google.com/rss/articles/CBMifEFVX3lxTE5jeWhMdkF2cUFmbnF0TkZTX080dFRCbGhXbW91RkI4MG9ydUE0ZDFRWk1WUGZsanZ6dUp3Z3ktMEs1NHR2dnRBQmROdzA4SFhfOVdYbElKZHpsTnFQd0JuYUJlMmdEcWlDNC1ERXdpajVNamZEZkotZkxod3U?oc=5) |
| The Information | Microsoft Warns of Chinese State-Linked Cyberattacks Powered by AI Agent | [Source Link](https://news.google.com/rss/articles/CBMiqwFBVV95cUxNRUxxWV9qVGlNR1BIcm1obUxtakoxb2dpTkl5R0FJU1VvakNmYU14MG43bVZMS1Rxa0l4RXNnbTlFMWxadUloOXNBVl9Mczk3UTZXSjlxdjZEVXN0UDhzMkp1UFAzSmZ6X1JuYzdGbzRWM3kyX21mRG5FMHBjcVEySGQ3ZFk3a2k0UmpQRG5fVzF1NWRtdG5BeTl4NVVLTzdYX0pGekdEWHdEcVU?oc=5) |
| CRN | MSPs Scramble To Determine Microsoft 365 Tenant Impact In ConnectWise Cloud Backup Breach | [Source Link](https://news.google.com/rss/articles/CBMi0gFBVV95cUxPR1AtdER1NXBrSGk2UHFrajE3bjYyX3oxeXRGTkhmcThQRV9ZNHVYeDNiLUthRVA0U2xxdzFwaEV5dEVtRk9pS0ZLU0szS3lCUGFsU2RWRnNJOGNsRG9taDRPNDhwRkxUQjNaMXhwVUpSdnVLWnl1RmRXSGROSkZsUUE2eVRZTWRERHh5MzNqbVA4VXZ3TXl2U0NES0pYZ0NzYXJlWXVGWEZSM09sM05DU2xFUVZ0RHlFUVZrdGJtV1lyS1pXV25hSHc0V190OElDeFE?oc=5) |
| Microsoft | AI-driven, large-scale nation-state campaign using ARTEX enables supply chain compromise | [Source Link](https://news.google.com/rss/articles/CBMixAFBVV95cUxPa3J3OXpucXRXM28xZy1CakJNcjh6X0ZWSU1pOHo3cjMwQVpDMkhqUlQyOGQ4b2dDSENEWllIOTNBT2V6RWlnM1M3OUVyRGNXd3pIOFdlaGlFNTJ5a1pWX3pUWnVLNFRsOHdZNzl3WHV3Y1F4aW8wWGthREhGNDlOVHBBOU45NXdjNkcxOFRtOXFlVzFkN1JwSVBlYTZFc1ZBN2NXN0VjREs0YzRaUW5Pek9PMC1xMlIyZWtma0x2TEhSbWpx?oc=5) |
| Reuters | Chinese-linked hackers compromise ConnectWise, target hundreds in global attack, Microsoft says | [Source Link](https://news.google.com/rss/articles/CBMivwFBVV95cUxQb3ZjLTdlTzhLZGFpNGw3SzBjb3p4aUwzb21qdDd5UmZ0OWxOZXlxYVlJMWFERzRfU1pRRkxOWmdBRVd3VjNWak96d1pUaHB6OHlzc2hEX3FwXzhhX2pUR1RDcTFMdExoaGVGeVlNRC16elFnMTZPbmpWTkhuQ2tCZnpBdV9vajJWNmcxRWdHSVppQ2hzYjJySTNIV3RSVEd5a0d6aGZXQUJBaVh3UnVVVkM4dzducmh3Y1h4TW9BZw?oc=5) |

---
*Canonical Source: https://pulse.byoviral.com/trend/2026-10-22/chinese-linked-hackers-compromise-connectwise-target-hundreds-in-global-attack*