Threat Actor
Storm-0940
- First Reported
- Oct 21, 2026
- Latest Reported
- Oct 23, 2026
Reported Context (8)
- China-linked threat actor that Microsoft reported using Artex in attacks against ConnectWise customers and other organizations. Microsoft Reports Storm-0940 Used Artex in ConnectWise Customer Attacks
- Wiz reports that its observations overlap with Microsoft's reporting on Storm-0940; Microsoft attributes three of the listed IP indicators to this actor. Wiz Details ARTEX-Using Actor’s Automated Targeting of IT and Software Vendors
- Microsoft attributed the ConnectWise-related activity to this China state-aligned actor. Microsoft Links Storm-0940 to ConnectWise Cloud Backup Supply-Chain Compromise Using ARTEX
- Microsoft's tracked name for the China-aligned threat actor that used ARTEX in the campaign. Microsoft Says Storm-0940 Used AI Agents in ConnectWise Campaign
- Microsoft attributed the activity to this China-linked threat actor. Microsoft Links Storm-0940 to ConnectWise Cloud Backup Supply-Chain Attack
CVE (2)
People (4)
Threat Actors (2)
MITRE ATT&CK (13)
Vendors (7)
Products (21)
Tools (8)
Industries (20)
Countries (3)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.