ARTEX AI pentest framework found on 1,465 exposed hosts, tied to South Korean bank breaches and Storm-0940 cloud attacks

Linha do tempo

1. infosecurity-magazine.com ↗ · pub. 06/11/2026 10:00 · coletado 06/11 10:01

   ARTEX AI pentest framework exposed on 1,465 hosts, far beyond the campaigns reported so far

   ler a análise desta fonte ocultar

   ARTEX is an open-source, AI-driven autonomous penetration testing and C2 framework. It was published on GitHub by Autumn-27 in July 2026, and the author withdrew the repository in October 2026 after widespread abuse. A Censys report of November 5 by Silas Cutler found 1,465 hosts exposing an ARTEX console to the internet. About 650 sit in two blocks of identically configured hosting, which leaves roughly 815 distinct-looking deployments. That suggests use well beyond the known campaigns, which are a CrowdStrike-reported attack on South Korean financial institutions, a Microsoft-reported compromise of ConnectWise tenants attributed to Storm-0940 (described by Microsoft as China-state-aligned), and a CERT-In warning about Crafty Falcon (November 4). Community forks such as ScopeWeaver and a commercial ARTEX PRO keep the tool spreading.

   Technical Details

   • ARTEX is written in Go with an embedded Next.js web console. It acts as a C2 platform that coordinates AI agents and can be plugged into LLMs (infosecurity-magazine.com).
   • Censys found that 155 hosts (10.6%) also run other threat artefacts: Vshell, Cobalt Strike, Adaptix C2, other AI attack frameworks, reconnaissance platforms and tunneling tools. It also lists ScopeSentry, which is maintained by the ARTEX creator, as a threat artefact.
   • ARTEX shares infrastructure with CyberStrikeAI (70 hosts), PentAGI, HexStrike AI and RedAmon. Operators appear to run several agent frameworks side by side.
   • 32 hosts expose open directories containing post-exploitation kits, stagers and implants. 43 hosts run self-hosted LLM gateway or reseller software, so access to AI models is becoming part of offensive infrastructure.
   • CrowdStrike saw ARTEX used with Anthropic's Claude in a campaign from late September to early October 2026. It assessed with moderate confidence that the attacker is a financially motivated Chinese speaker.
   • Check Point reported that ARTEX AI agents can run large-scale attacks with little human input for a few hundred dollars, though they still fail and hallucinate successes.

   Remediation

   The article gives no remediation guidance.

2. gbhackers.com ↗ · pub. 06/11/2026 02:02 · coletado 06/11 04:00 primeiro registro

   ARTEX AI pentest framework linked to South Korean bank breaches and Storm-0940 cloud attacks exposed on 1,465 hosts

   ler a análise desta fonte ocultar

   Censys found ARTEX, an LLM-driven autonomous penetration-testing framework, exposed on 1,465 hosts as of November 4. About 650 of them share standardized configurations across two hosting networks, which leaves roughly 815 distinct-looking deployments. CrowdStrike (October 7) linked ARTEX infrastructure to late-September and early-October breaches of South Korean financial organizations, with data exfiltration observed. Separately, Microsoft attributed the ConnectWise Cloud Backup supply-chain compromise to the China-aligned actor Storm-0940, and Censys researchers said that actor used ARTEX in its cloud attacks. The exposure alone does not prove malicious ownership, because authorized testers also use offensive frameworks and repeated hosting templates inflate counts.

   Technical Details

   • ARTEX was published by developer Autumn-27 on July 26, 2026 under AGPL-3.0. It is built on Go, a Next.js console and PostgreSQL.
   • It integrates with ScopeSentry and mitmproxy. A Planner agent turns objectives into attack intents, and worker agents run tools in an event-driven loop. It supports Anthropic, OpenAI and compatible model endpoints.
   • The CrowdStrike-linked ARTEX server, 38.244.50[.]120, used DeepSeek v4.1-flash, apparently through an API reseller. Its exposed directories held Claude Code histories, prompts and configuration files. Censys scan history shows open directories on it from August 18, about seven weeks before disclosure.
   • The breached systems were a broker-facing loan inquiry service and an employee mobile work-support system. CrowdStrike assessed with moderate confidence that the unattributed operator was financially motivated and Chinese-speaking.
   • Censys reports that Storm-0940 used ARTEX for reconnaissance, password spraying and OAuth application abuse. It attempted authentication against more than 2,250 customer tenants, and some intrusions reached privileged cloud access within three hours. A related spray campaign peaked at 2,900 failures per minute with no observed successful authentication. Downstream abuse relied on stolen application credentials and existing customer trust. Microsoft cautioned that authentication alone does not establish data theft.
   • Another 32 ARTEX hosts exposed directories with post-exploitation tools, stagers, implants, scripts and credentials.
   • 155 hosts (10.6%) carried other Censys threat detections. CyberStrikeAI appeared on 70, and Vshell, Cobalt Strike, Adaptix C2 and tunneling software were also colocated. 43 hosts also ran LLM gateways or reseller platforms.

   Remediation

   • Review service-principal sign-ins, unexpected application credentials, privilege changes and subsequent Microsoft Graph activity (Microsoft guidance).
   • Preserve evidence before removing applications, and investigate unauthorized persistence.
   • Correlate successful authentications with resource access and directory changes, rather than relying only on known attacker IPs or application names.
   • Do not treat ARTEX exposure alone as proof of compromise.