Censys finds over 800 Artex AI hacking tools exposed online
Original title: Hundreds of Artex AI hacking tools found publicly exposed to the web
Passwordless Artex consoles also expose implants, and prior uses include Korean finance and a ConnectWise intrusion.
Censys identified more than 800 internet-accessible deployments of Artex, a Chinese-made open-source autonomous penetration-testing tool, that required no password. Microsoft has described Artex as AI agents that can move from reconnaissance to data exfiltration with little human interaction. CrowdStrike linked a Chinese-speaking hacker to September attacks on the Korean finance industry using a publicly exposed Artex instance; Censys says that host also held data beyond South Korean banks. Artex was also used in an October intrusion at ConnectWise that let Chinese-linked hackers steal Microsoft-cloud customer data. Artex has since said it will go closed-source, while copies of the code remain on sharing sites.
Unconfirmed: Censys says it is unclear why hundreds of instances are exposed and that not every one is operated maliciously.
- Censys says the software does not need to be reachable from the internet.
- Silas Cutler said many instances may belong to authorized testers.
- The Korean-linked instance had been exposed for months, Censys said.
- Linked attacks often used weak or known passwords and missing MFA.
- Dozens of Artex code copies remain available for active use.
Impact: Exposed implants and attack data; linked cloud data theft
- 1.Do not leave Artex consoles reachable from the internet without authentication.
- 2.Treat exposed Artex hosts as possible sources of implants and attack data.
- Products
- Artex
- Victims
- ConnectWise
- Organizations
- CensysMicrosoftCrowdStrike
- Countries
- ChinaSouth Korea
From the original article
3 min read at techcrunch.com
Security researchers found hundreds of servers hosting the penetration testing tool Artex exposed to the internet, allowing anyone access to the hacking tool.
By Zack Whittaker · techcrunch.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.