Security researchers have exposed a sophisticated campaign by the China-linked threat group Storm-0940 targeting ConnectWise infrastructure using advanced automation. Telemetry shows the malicious syndicate leveraged agentic artificial intelligence to execute high-speed credential-stuffing attacks reaching nearly 2,900 sign-in attempts per minute. The autonomous agents dynamically adapted their tactics in real time, bypassing traditional rate-limiting and defensive security tripwires designed to catch brute-force scripts. Industry experts highlight the incident as a stark realization of threat actors deploying machine-speed AI tools to infiltrate enterprise management platforms. Cybersecurity vendors are urging immediate adoption of behavior-based defenses and advanced identity protection to counter autonomous state-sponsored cyber operations.

Full report : Cybersecurity disclosures reveal how Chinese state-sponsored hackers utilized autonomous AI agents to launch automated credential-stuffing attacks at a rate of 2,900 attempts per minute.