Threat actors weaponize ARTEX AI pentest framework to automate intrusions; GTIG tracks UNC7228 overlapping Storm-0940
Google Threat Intelligence Group (GTIG) and Mandiant report that financially motivated extortion groups and suspected cyberespionage operators have used ARTEX, an autonomous AI penetration-testing framework, since late August 2026. Operators delegate post-compromise work to coordinated AI agents, compressing execution sequences into seconds. One campaign is tracked as UNC7228, which overlaps with Microsoft's China-linked Storm-0940, and victims include software, industrial automation, semiconductor and telecommunications organizations in the United States and Europe. The activity is noisy and often error-prone, but it shortens the time from initial account compromise to deep access to about four hours, and in one case 15 minutes.
Detalhes técnicos
- ARTEX is written in Go with an embedded Next.js console and translates operator objectives into commands through six specialized sub-agents.
- Capabilities cover Active Directory reconnaissance, cloud permission discovery, credential harvesting, privilege escalation and custom webshell deployment.
- Execution bursts last about 2 to 25 seconds; one case logged 27 events in 23 seconds during AWS permission probing.
- Against an internet-facing Weaver OA server, ARTEX issued SQL commands through authenticated application APIs and tried to abuse MySQL logging to drop JSP webshells in web-accessible directories. It generated 240 log events and iterated on compilation errors until some files returned valid command output.
- Wiz independently documented overlapping activity against IT and software vendors, including Okta, Microsoft Entra ID, AWS Cognito and Microsoft 365 integrations. It combined application mapping, authentication probing, password spraying, account-recovery abuse and cross-tenant access testing. Agents extracted API routes from source maps. Some sessions lasted 24-30 hours, though most attempts failed.
- Mandiant observed database extraction, mass blob reads, directory enumeration and preparation of cloud storage for exfiltration. Command output was sent through rotating webhook.site endpoints.
- The ARTEX developer announced closure and ended maintenance on October 8 after malicious abuse, but existing copies and forks remain.
Remediação
- Correlate rapid permission checks, repeated authorization failures, unexpected administrative accounts, webshell creation, unusual snapshot activity and outbound webhook traffic.
- Do not rely on filenames or generic user agents for attribution; they are noisy indicators.
- Use isolated management planes, short-lived credentials, least privilege, segmentation and behavioral detection that can trigger rapid containment.
Linha do tempo
-
Threat actors weaponize ARTEX AI pentest framework to automate intrusions; GTIG tracks UNC7228 overlapping Storm-0940
ler a análise desta fonte ocultar
Google Threat Intelligence Group (GTIG) and Mandiant report that financially motivated extortion groups and suspected cyberespionage operators have used ARTEX, an autonomous AI penetration-testing framework, since late August 2026. Operators delegate post-compromise work to coordinated AI agents, compressing execution sequences into seconds. One campaign is tracked as UNC7228, which overlaps with Microsoft's China-linked Storm-0940, and victims include software, industrial automation, semiconductor and telecommunications organizations in the United States and Europe. The activity is noisy and often error-prone, but it shortens the time from initial account compromise to deep access to about four hours, and in one case 15 minutes.
Technical Details
- ARTEX is written in Go with an embedded Next.js console and translates operator objectives into commands through six specialized sub-agents.
- Capabilities cover Active Directory reconnaissance, cloud permission discovery, credential harvesting, privilege escalation and custom webshell deployment.
- Execution bursts last about 2 to 25 seconds; one case logged 27 events in 23 seconds during AWS permission probing.
- Against an internet-facing Weaver OA server, ARTEX issued SQL commands through authenticated application APIs and tried to abuse MySQL logging to drop JSP webshells in web-accessible directories. It generated 240 log events and iterated on compilation errors until some files returned valid command output.
- Wiz independently documented overlapping activity against IT and software vendors, including Okta, Microsoft Entra ID, AWS Cognito and Microsoft 365 integrations. It combined application mapping, authentication probing, password spraying, account-recovery abuse and cross-tenant access testing. Agents extracted API routes from source maps. Some sessions lasted 24-30 hours, though most attempts failed.
- Mandiant observed database extraction, mass blob reads, directory enumeration and preparation of cloud storage for exfiltration. Command output was sent through rotating webhook.site endpoints.
- The ARTEX developer announced closure and ended maintenance on October 8 after malicious abuse, but existing copies and forks remain.
Remediation
- Correlate rapid permission checks, repeated authorization failures, unexpected administrative accounts, webshell creation, unusual snapshot activity and outbound webhook traffic.
- Do not rely on filenames or generic user agents for attribution; they are noisy indicators.
- Use isolated management planes, short-lived credentials, least privilege, segmentation and behavioral detection that can trigger rapid containment.