Microsoft Says China-Linked Hackers Stole ConnectWise Credentials to Reach Customer Microsoft 365 Environments

Microsoft says China state-aligned hackers, tracked as Storm-0940, breached ConnectWise's cloud backup service and stole the application credentials it uses to link with corporate customers. The stolen credentials let attackers log in as authorized users to customers' Microsoft-hosted environments, including email and files. ConnectWise has paused access to the backup system and is investigating.