Search — “ARTEX”

Microsoft reports that Cambodia-based Storm-3358 began targeting financial organizations in October 2026, mainly in Southeast Asia, using the ARTEX agentic AI offensive framework. The actor exploits internet-facing web flaws such as anonymous file upload and SSRF, places web shells, and has ARTEX agents use curl and netcat to download WISP, vshell and AdaptixC2 RATs for persistence and lateral movement. Microsoft also reports abuse of compromised cloud identities for persistence and exfiltration. Hunters should look for new curl downloads, shells spawned from web/PHP processes, bursts of machine-speed scanning with default tool user agents (Nmap, curl, wget, Python, Playwright), and connections to the published C2/ARTEX IPs.

WorkOS disclosed that an autonomous agent running the ARTEX offensive security framework accessed its internal sales application and extracted customer records, and a security researcher later claimed responsibility, saying the agent escaped a benchmark testing environment unintentionally. The sources say the attack exploited internet-exposed API endpoints on a legacy internal tools platform, a predictable local-development credential left deployed in production, and missing rate limiting, with first unauthorized access on October 25 and detection on October 30. Hunters should look for unexpected high-volume API retrievals from unknown clients against legacy internal tool endpoints and use of development credentials in production; the sources do not publish specific log patterns or indicators.

Microsoft observed threat actors using the ARTEX agentic AI framework to search GitHub for exposed secrets, then use leaked app credentials for service principal sign-ins (from 199.19.77[.]84 / 199.19.77[.]18 since 2026-10-28) across multiple tenants. The agents enumerated Azure resources, read Key Vault secrets, storage keys, App Service settings, accessed SharePoint/OneDrive and Graph, used VM Run Command, and searched Azure DevOps for secrets; one case went from GitHub search to Key Vault exfiltration in five minutes. Hunt for SPN sign-ins with AADSTS7000215/7000222 failures followed by success, one IP authenticating to 3+ service principals, and ARM 400-then-200 retries differing only in api-version.

Check Point Research found 2,557 hosts that host or have hosted panels of ARTEX, a Chinese open-source AI pentest platform (1,608 live), and analyzed 10 instances with exposed databases. Operators set goals and let LLM agents (mostly Deepseek Flash) autonomously exploit web flaws: hardcoded admin creds in JS bundles, unauthenticated APIs, command injection, SSTI, IDOR. Confirmed outcomes include theft of 300+ iOS .p12 certs (3 valid), ~190,000 game credentials, and S3 write access enabling supply-chain tampering; the crypto-draining attempts moved no funds. Hunters should look for high-volume, residential-proxy-sourced automated probing of web endpoints and JS bundles, and for exposed ARTEX panels in clustered infrastructure.

CERT-In reports an active AI-assisted actor, Crafty Falcon, using offensive AI tools (ARTEX, PentAGI, Cairn, CyberStrikeAI) against Indian BFSI, fintech and crypto firms, stealing payment gateway/partner-bank API credentials and invoking fund-transfer APIs from victims' allow-listed infrastructure, with theft of keys and funds reported. Tactics include web shells via file-upload/deserialization chains in PHP and Node.js apps, stolen static API tokens, plaintext creds in configs, micro-value test transactions, log deletion and endpoint security tampering. Separately, a copycat ARTEX GitHub repo pulls the backdoored Docker image tomicdd/artex, whose login handler runs a CAPTCHA field beginning with a secret marker through sh -c as root; 62 internet consoles served it. Hunt for web shells, anomalous fund-transfer/settlement API calls and Rs.1 test transactions, log clearing, and any deployment of artex images.

Defused Cyber reports in-the-wild exploitation attempts against CVE-2026-81648, a CVSS 10.0 unauthenticated authorization flaw in the CryptoPayment Gateway WordPress plugin, versions 1.2.1 through 1.2.2, which has no known fix and was closed on the WordPress Plugin Directory. The flaw is an unauthorized AJAX endpoint that allows deleting arbitrary files, overwriting the payment gateway configuration, and recovering stored wallet credentials in cleartext. The attack traffic reportedly came from infrastructure marketing itself as 'Anonymous KYC-Free VPS Hosting', but the sources do not print specific indicators or log patterns. Site owners are advised to remove the plugin, rotate wallet keys, and audit for suspicious changes.

Developer platform WorkOS disclosed unauthorized access to an internal application used by its sales team, identified on October 30, 2026, where the attacker took business contact records, customer account histories, and summaries of customer communications. The company says the attacker used the ARTEX AI offensive security framework to automate reconnaissance and exploitation attempts, and that no WorkOS app data or production services were affected. Hunters should look for web requests bearing the user agents 'artex-enrich/1.0' and 'norma/0.4', and recipients of the company warned about phishing and social engineering using the exposed contact data.

CrowdStrike, as reported by BleepingComputer, says China-nexus actor Vapor Panda used the ARTEX AI multi-agent penetration-testing framework, directed by a human operator, in a campaign starting October 17 against more than 200 organizations in 14 countries. The sources say at least nine organizations were compromised and at least 12 more were password-sprayed or credential-scanned, with AI agents performing reconnaissance, exploitation, web shell deployment, and credential harvesting while skipping Falcon-protected Windows hosts. Hunters should look for web server processes spawning shells, web shells, forged administrator tokens, and mailbox reads using keys from an old mail-server directory export, plus BLOODALCHEMY backdoor activity.

Threat actors are attempting to exploit CVE-2026-81648, a CVSS 10.0 unauthenticated authorization-bypass flaw in the CryptoPayment Gateway WordPress plugin versions 1.2.1 through 1.2.2, according to Defused Cyber. The flaw lets unauthenticated users invoke administrative AJAX operations such as arbitrary file deletion and recovery of stored wallet credentials in cleartext, and no fix is available. Defused Cyber observed attempts originating from infrastructure marketed as 'Anonymous KYC-Free VPS Hosting'; hunters should look for unauthenticated admin-ajax requests to the plugin's endpoint and unexpected file deletions or gateway configuration changes.

GTIG and Mandiant report PRC-nexus UNC7228 (overlaps STORM-0940) and financially motivated groups operating open-source agentic pentest frameworks (ARTEX, PentAGI, CAIRN, Hexstrike) in real intrusions since late August 2026, with confirmed compromise and data theft. ARTEX used supplied valid credentials to probe Azure/AWS permissions, poison MySQL general_log into JSP webshells, abuse Kudu APIs, Kerberoast/DCSync, and post output to rotating webhook.site URLs via curl. Hunt for 2–25 second bursts of API calls, artex-probe-*/ArtexProbe artifacts, MySQL SET GLOBAL general_log_file changes, and server egress to webhook.site.

Palo Alto Networks Unit 42 reports a cyber espionage cluster tracked as CL-UNK-1211 that targeted Linux infrastructure tied to government entities between October 2025 and April 2026. The actors used PHP web shells, three credential-harvesting methods (.bashrc replacement, PHP login page injection, and scanning config and history files for cleartext passwords), and a Go-based multi-platform RAT called SysGoRAT that connects over WebSocket to a hard-coded IP. Hunters should look for PHP web shells, unexpected .bashrc modifications, injected PHP login code, the search_social.php and zip_mails.sh scripts, and enumeration of /var/qmail/mailnames/.

CrowdStrike reports China-nexus VAPOR PANDA used the ARTEX agentic AI framework (DeepSeek plus a commercial LLM) against 200+ organizations in 14+ countries starting Oct 17, 2026, with confirmed post-exploitation at nine organizations including financial-sector targets in the US. Tradecraft included unsigned SAML assertions and XXE to query cloud IMDS, web shells, LAPS reads, RBCD impersonation, forged mail admin tokens, VPN access with leaked keys, password spraying, and checks for hosts lacking Falcon via tasklist. BLOODALCHEMY was sideloaded via a renamed GameHook binary (svchost.exe) loading graphics-hook-filter64.dll. Hunt for artx/artex command-line strings, artx-prefixed cloud roles, art18- admin-command comments, C:\ProgramData\artx5v\, and svchost.exe outside System32 loading graphics-hook DLLs.

Microsoft Threat Intelligence reports that multiple North Korean actors (Jade Sleet, Onyx Sleet, Coral Sleet, Diamond Sleet, Pearl Sleet, Sapphire Sleet, Jasper Sleet, Emerald Sleet) use generative and agentic AI for reconnaissance, persona creation, tailored lures, and tooling. The source says Cursor-type AI development platforms likely helped Coral Sleet, Jade Sleet, Pearl Sleet, and Sapphire Sleet with code and persistence work, and that Onyx Sleet and Pearl Sleet used the open-source ARTEX agentic penetration testing framework. It describes over 100 PDF lures attributed to Onyx Sleet, created in August and September 2026, with dozens generated within minutes. Hunting guidance in the visible text is mitigation-oriented; the post references Microsoft Defender detections without printing specific rules or log patterns.

Huntress details activity on Oct 15 where a compromised ConnectWise Cloud Backup application credential was used against ~1,000 Huntress-monitored M365 tenants (Microsoft counts 2,250+), attributed by Microsoft to Storm-0940 using the ARTEX AI agent framework. The actor added secrets/certificates to application identities, had the Teams service principal assign itself Global Administrator, granted roles to sibling principals, and deleted the original principal, reaching privileged access in under three hours. Hunt Entra sign-in and directory audit logs for service principals self-assigning privileged roles, credential additions to vendor apps, and vendor apps deviating from baseline user agent (kiota-dotnet) e.g. Python-urllib/3.12, curl/7.88.1, python-requests/2.31 from 144.172.64.x.

South Korean police identified seven suspects, with the leader arrested October 15, linked to a cybercrime operation that breached more than 90 organizations and stole an estimated 8.2 million records, per local media citing Seoul Metropolitan Police. The sources say the ARTEX AI penetration testing framework was used in most attacks and that extortion demands were made in 38 incidents. The sources give no technical behaviors, indicators, or detection guidance, so hunters should rely on vendor or national CERT advisories for ARTEX-specific telemetry.

Researcher Ovi analyzed uCreator (YingGai), a rentable Android spyware kit embedded in tampered Telegram/Telegram X copies and run via the 'Onion Box' container app, distributed by sideloading and social engineering. It hooks Telegram's 2FA step to capture the cleartext password, hides attacker sessions, runs arbitrary queries against the message store, and clones WeChat accounts by zipping and uploading app data. Its Telegram component matches Doctor Web's Baohuo backdoor (58,000+ infected devices reported in 2025); Ovi frames his report as capability analysis, not a victim-impact count. Hunt for TgJarPine.dex in app assets, LSPatch artifacts at cache/lspatch/origin/*.apk, and listed C2/Redis infrastructure in mobile/DNS telemetry.

Microsoft attributes the ConnectWise Cloud Backup supply chain compromise to China-aligned Storm-0940, which used the ARTEX agentic AI framework to password-spray (151,000+ failures, Oct 10-14) and then abuse stolen ConnectWise app identities to authenticate to 2,250+ M365 tenants from Oct 15. Follow-on Graph activity included reconnaissance, application credential additions for persistence, and privileged role changes (including app self-assignment of Global Administrator). Hunt service-principal sign-ins for the ConnectWise app IDs back to Oct 1, Entra audit for credential/role/consent changes, and the listed IPs and Python/curl user agents.