Chinese State-Linked Hackers Used Stolen Keys to Reach Business Email and Files

Microsoft says Chinese state-linked hackers, tracked as Storm-0940, broke into ConnectWise's online backup service. They stole the digital keys software uses to connect with business customers. Those keys let attackers log in as trusted users to customers' Microsoft 365 accounts, which hold email and files. ConnectWise has paused access to the backup system and is investigating.