ARTEX AI pentest framework exposed on 1,465 hosts, far beyond the campaigns reported so far
ARTEX is an open-source, AI-driven autonomous penetration testing and C2 framework. It was published on GitHub by Autumn-27 in July 2026, and the author withdrew the repository in October 2026 after widespread abuse. A Censys report of November 5 by Silas Cutler found 1,465 hosts exposing an ARTEX console to the internet. About 650 sit in two blocks of identically configured hosting, which leaves roughly 815 distinct-looking deployments. That suggests use well beyond the known campaigns, which are a CrowdStrike-reported attack on South Korean financial institutions, a Microsoft-reported compromise of ConnectWise tenants attributed to Storm-0940 (described by Microsoft as China-state-aligned), and a CERT-In warning about Crafty Falcon (November 4). Community forks such as ScopeWeaver and a commercial ARTEX PRO keep the tool spreading.
Detalhes técnicos
- ARTEX is written in Go with an embedded Next.js web console. It acts as a C2 platform that coordinates AI agents and can be plugged into LLMs (infosecurity-magazine.com).
- Censys found that 155 hosts (10.6%) also run other threat artefacts: Vshell, Cobalt Strike, Adaptix C2, other AI attack frameworks, reconnaissance platforms and tunneling tools. It also lists ScopeSentry, which is maintained by the ARTEX creator, as a threat artefact.
- ARTEX shares infrastructure with CyberStrikeAI (70 hosts), PentAGI, HexStrike AI and RedAmon. Operators appear to run several agent frameworks side by side.
- 32 hosts expose open directories containing post-exploitation kits, stagers and implants. 43 hosts run self-hosted LLM gateway or reseller software, so access to AI models is becoming part of offensive infrastructure.
- CrowdStrike saw ARTEX used with Anthropic's Claude in a campaign from late September to early October 2026. It assessed with moderate confidence that the attacker is a financially motivated Chinese speaker.
- Check Point reported that ARTEX AI agents can run large-scale attacks with little human input for a few hundred dollars, though they still fail and hallucinate successes.
Remediação
The article gives no remediation guidance.
Linha do tempo
-
ARTEX AI pentest framework exposed on 1,465 hosts, far beyond the campaigns reported so far
ler a análise desta fonte ocultar
ARTEX is an open-source, AI-driven autonomous penetration testing and C2 framework. It was published on GitHub by Autumn-27 in July 2026, and the author withdrew the repository in October 2026 after widespread abuse. A Censys report of November 5 by Silas Cutler found 1,465 hosts exposing an ARTEX console to the internet. About 650 sit in two blocks of identically configured hosting, which leaves roughly 815 distinct-looking deployments. That suggests use well beyond the known campaigns, which are a CrowdStrike-reported attack on South Korean financial institutions, a Microsoft-reported compromise of ConnectWise tenants attributed to Storm-0940 (described by Microsoft as China-state-aligned), and a CERT-In warning about Crafty Falcon (November 4). Community forks such as ScopeWeaver and a commercial ARTEX PRO keep the tool spreading.
Technical Details
- ARTEX is written in Go with an embedded Next.js web console. It acts as a C2 platform that coordinates AI agents and can be plugged into LLMs (infosecurity-magazine.com).
- Censys found that 155 hosts (10.6%) also run other threat artefacts: Vshell, Cobalt Strike, Adaptix C2, other AI attack frameworks, reconnaissance platforms and tunneling tools. It also lists ScopeSentry, which is maintained by the ARTEX creator, as a threat artefact.
- ARTEX shares infrastructure with CyberStrikeAI (70 hosts), PentAGI, HexStrike AI and RedAmon. Operators appear to run several agent frameworks side by side.
- 32 hosts expose open directories containing post-exploitation kits, stagers and implants. 43 hosts run self-hosted LLM gateway or reseller software, so access to AI models is becoming part of offensive infrastructure.
- CrowdStrike saw ARTEX used with Anthropic's Claude in a campaign from late September to early October 2026. It assessed with moderate confidence that the attacker is a financially motivated Chinese speaker.
- Check Point reported that ARTEX AI agents can run large-scale attacks with little human input for a few hundred dollars, though they still fail and hallucinate successes.
Remediation
The article gives no remediation guidance.