Storm-0940
Unknown Active
- Mentions
- 4
- First seen
- 21 Oct 2026
- Last seen
- 22 Oct 2026
Relevant to you · Relevant
- Threat focus:
- supply chainespionage / apt
Origin
Unattributed
Profile
Storm-0940 is a China-linked threat group associated with a supply chain attack targeting ConnectWise. The attackers use the ARTEX AI agent platform to conduct large-scale, state-aligned campaigns. Microsoft attributed the incident to a China-state aligned threat group. The campaign enabled a supply chain compromise.
Affected vendors
ConnectWise
Targeted sectors
software supply chaininformation technology
Associated malware / tools
ARTEX
Related actors
Share a CVE, technique or malware with this actor.
Activity (8 weeks)
Recent activity
- Microsoft Links Storm-0940 to ConnectWise Supply Chain Attack darkreading
- China-Linked Hackers Use ARTEX AI Agents in ConnectWise Supply Chain Attack The Hacker News
- Microsoft pins ConnectWise supply-chain attack to China-state aligned threat group CyberScoop
- AI-driven, large-scale nation-state campaign using ARTEX enables supply chain compromise Microsoft Security Blog