Threat actors adopt open-source Artex AI pentest framework
Original title: Artex: The AI Pen-Test Tool Hackers Turned Into a Weapon
The creator deleted the GitHub repository in late October after abuse, but forks still support credential and cloud attacks.
Independent developer Autumn-27 published Artex, an open-source multiagent penetration-testing framework written in Go, on GitHub in July. By late summer and early fall, threat actors were using it to brute-force passwords, dump databases, and abuse APIs. The creator deleted the original repository at the end of October because of abuse, but forks remain. GitGuardian separately detailed 45 similar tools; that portion of the report is cut off.
Unconfirmed: The article does not name the threat actors using Artex or confirm specific victim intrusions.
- Artex was published as a legitimate penetration-testing tool.
- An Akamai advisory CISO said AI lowers the skill needed to chain attacks.
- Microsoft described an AI agent reaching Azure Key Vault data in five minutes.
- GitGuardian detailed 45 similar pen-testing tools.
Impact: Automated credential attacks, database dumps, and API abuse
- ATT&CK
- T1110 Brute Force
- Products
- Artex
- Organizations
- GitHubGitGuardianMicrosoftAkamai
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| md5 | 058ef0cfb57652bddd698609c655b901 | storm-backdoor-attacks#recipe=similar-items&sourcecontentid=058ef0cfb57652bddd698609c655b901) CISA Warns of 'Ongoing' Brickstorm Backdoor Attacks by Ro |
| md5 | 142a2e80d6a5fef7c9df2e421245edcb | ing-fortune-500-brands#recipe=similar-items&sourcecontentid=142a2e80d6a5fef7c9df2e421245edcb) Operation DoppelBrand: Weaponizing Fortune 500 Brands by |
| md5 | 4056475ddaadba32176031a32b0b2af4 | omers-hacked-gainsight#recipe=similar-items&sourcecontentid=4056475ddaadba32176031a32b0b2af4) Deja Vu: Salesforce Customers Hacked Again, Via Gainsight |
| md5 | 772e2b458963b1a9ec224771cac5b591 | -orgs-high-end-malware#recipe=similar-items&sourcecontentid=772e2b458963b1a9ec224771cac5b591) Chinese APTs Hacking Asian Orgs With High-End Malware by |
From the original article
9 min read at darkreading.com
Forks of the open source Artex framework, along with 45 similar pen-testing tools, remain capable of executing credential attacks and cloud breaches at machine speed across multiple industries.
By Alexander Culafi · darkreading.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.