Threat Actors Abuse Agentic Frameworks ARTEX and CAIRN for Automated Intrusions
Original title: ARTEX and Friends: Enter Agentic Offensive Frameworks
Mandiant and GTIG observe ARTEX, Hexstrike, and CAIRN used by threat actors in live incidents since August 2026, enabling rapid lateral movement and exfiltration.
GTIG and Mandiant report threat actors weaponizing open-source agentic pentesting frameworks ARTEX, Hexstrike, and CAIRN to automate intrusions. Activity spans financial extortion groups and cyber espionage operators, including UNC7228 linked to STORM-0940. Compromises occur in minutes to hours, with automated reconnaissance, privilege escalation, cloud profiling, webshell deployment, and data theft targeting US and European enterprises in software, industrial, semiconductor, and telecom sectors.
Unconfirmed: Details on exact framework forks and custom harnesses
- Frameworks observed in Mandiant incident response engagements
- Rapid access achieved in as little as 15 minutes
- Targets include enterprise software and critical infrastructure
- Custom forks and commercial variants proliferating
- Behavioral detection and least privilege recommended
Impact: Automated lateral movement and data exfiltration
- 1.Isolate control plane
- 2.Enforce least privilege
- 3.Deploy behavioral detection
- Threat actors
- UNC7228STORM-0940
- Organizations
- Wiz Research
- Countries
- United StatesEurope
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| domain | webhook.site | h scripts and post back command results across 491 rotating webhook.site URLs. Escalate Privileges Attempted to escalate privileges |
From the original article
12 min read at cloud.google.com
Written by: Aurora Blum, David Mainor, Rohit Nambiar, Omar ElAhdan, Matthew McWhirt, Will Silverstone, Bhavesh Dhake, Chris Busse Introduction Recent intrusions in which threat actors have been observed weaponizing agentic frameworks to execute highly-automated intrusions has put a spotlight on evolving adversarial use of LLMs.
By Google Threat Intelligence Group · cloud.google.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.