According to a recent LinkedIn post from Aviatrix, an AI-enabled penetration-testing tool reportedly generated 2,900 login attempts per minute without triggering lockout controls or alerts. The post describes Storm-0940 using Artex, an open-source framework intended for defensive use, before moving to ConnectWise after password spraying stalled and reaching more than 2,250 downstream cloud environments in three hours.
The post cites Matt Snyder, Aviatrix’s head of security operations and threat research, as telling Dark Reading that attack tooling is becoming more capable while operational security practices remain inconsistent. It suggests that more individuals can now launch sophisticated attacks, while some leave their own infrastructure exposed.
For investors, the episode highlights the growing difficulty of protecting cloud environments from automated credential attacks and lateral movement. It could support demand for identity, monitoring and cloud-security products, although the post provides no financial guidance, customer impact data or Aviatrix-specific performance metrics.
The incident also underscores potential compliance, reputational and liability risks for organizations connected through cloud and technology-service ecosystems. Its broader industry impact will depend on whether similar attack methods become widespread and how effectively companies strengthen authentication, alerting and access controls.