AI-Agent Frameworks ARTEX and CyberStrikeAI Power Chinese-Linked Espionage Campaigns Against 200+ Organizations
CrowdStrike and Kaspersky separately reported China-nexus threat actors using agentic AI frameworks to plan and execute intrusions, with the LLM itself deciding commands rather than just assisting with reconnaissance or phishing content. CrowdStrike tracked the group Vapor Panda using a new framework called ARTEX, built mainly on DeepSeek, to hit organizations in at least 14 countries over 11 days starting October 17, 2026, including foreign ministries, US defense and semiconductor firms, telecoms, and think tanks. Post-exploitation with the BloodAlchemy backdoor was confirmed at nine organizations, and password spraying was observed against at least 12 more. Separately, Kaspersky detailed a smaller campaign against educational institutions in Africa and Latin America using the open-source CyberStrikeAI framework, attributed with moderate confidence to Chinese-speaking operators based on Chinese code comments, use of dnslog[.]cn, and UTC+8 business-hour C2 activity.
Detalhes técnicos
In the ARTEX campaign, a main agent delegates to planner and worker agents sharing a knowledge graph; one intrusion alone consumed roughly 1.4 billion input tokens, with human operators stepping in at decision points using Chinese-language instructions. Observed techniques include chaining an unsigned SAML assertion with an XXE flaw to reach cloud instance metadata services and escalate to enterprise admin, and reusing a 2022 directory export of unrotated mail server authentication keys against a Greek government entity to forge admin tokens and access VPN configurations from a 2024 email leak. Microsoft has also reported separate ARTEX use by Storm-0940, suggesting the framework is spreading among China-nexus actors. In the CyberStrikeAI campaign, attackers manually compromised a SQL Server, then deployed the AI-driven implant which achieved persistence and local recon within two minutes, domain mapping within five hours, and full domain admin compromise within three to four days, using Kerberoasting, AS-REP Roasting, LSASS dumps, DCSync, and Golden Ticket attacks.
Remediação
CrowdStrike recommends rotating keys and credentials after any suspected exposure, enforcing SAML signature validation and IMDSv2, hunting for ARTEX markers, patching internet-facing appliances, and deploying EDR broadly across environments, since attackers specifically target detection gaps.
Linha do tempo
-
AI-Agent Frameworks ARTEX and CyberStrikeAI Power Chinese-Linked Espionage Campaigns Against 200+ Organizations
ler a análise desta fonte ocultar
CrowdStrike and Kaspersky separately reported China-nexus threat actors using agentic AI frameworks to plan and execute intrusions, with the LLM itself deciding commands rather than just assisting with reconnaissance or phishing content. CrowdStrike tracked the group Vapor Panda using a new framework called ARTEX, built mainly on DeepSeek, to hit organizations in at least 14 countries over 11 days starting October 17, 2026, including foreign ministries, US defense and semiconductor firms, telecoms, and think tanks. Post-exploitation with the BloodAlchemy backdoor was confirmed at nine organizations, and password spraying was observed against at least 12 more. Separately, Kaspersky detailed a smaller campaign against educational institutions in Africa and Latin America using the open-source CyberStrikeAI framework, attributed with moderate confidence to Chinese-speaking operators based on Chinese code comments, use of dnslog[.]cn, and UTC+8 business-hour C2 activity.
Technical Details
In the ARTEX campaign, a main agent delegates to planner and worker agents sharing a knowledge graph; one intrusion alone consumed roughly 1.4 billion input tokens, with human operators stepping in at decision points using Chinese-language instructions. Observed techniques include chaining an unsigned SAML assertion with an XXE flaw to reach cloud instance metadata services and escalate to enterprise admin, and reusing a 2022 directory export of unrotated mail server authentication keys against a Greek government entity to forge admin tokens and access VPN configurations from a 2024 email leak. Microsoft has also reported separate ARTEX use by Storm-0940, suggesting the framework is spreading among China-nexus actors. In the CyberStrikeAI campaign, attackers manually compromised a SQL Server, then deployed the AI-driven implant which achieved persistence and local recon within two minutes, domain mapping within five hours, and full domain admin compromise within three to four days, using Kerberoasting, AS-REP Roasting, LSASS dumps, DCSync, and Golden Ticket attacks.
Remediation
CrowdStrike recommends rotating keys and credentials after any suspected exposure, enforcing SAML signature validation and IMDSv2, hunting for ARTEX markers, patching internet-facing appliances, and deploying EDR broadly across environments, since attackers specifically target detection gaps.