Skip to content
NewA calmer, faster ZeroHour
StoryThreat actorhighExploited in the wild

Vapor Panda uses ARTEX AI to compromise 200 organizations

2 sources · 2 articlesFirst reported Updated ()
What's new

First merged summary.

Merged summary · x-ai/grok-4.7 · rewritten as coverage arrivesSummaries by Vani AI

Vapor Panda compromised over 200 organizations using ARTEX AI since October 17

Chinese state-backed group Vapor Panda used ARTEX AI framework with DeepSeek to attack more than 200 organizations in 14 countries since October 17. Targets include government ministries, telecom providers, and sectors in pharma, semiconductors, defense, nuclear, and finance. About 140 sensitive targets were compromised, with 9 confirmed and password spraying on 12 high-value ones. AI agents forged tokens and deployed backdoors.

Key facts
  • 200+ organizations targeted in 14 countries since October 17
  • 140 sensitive targets compromised
  • 9 organizations confirmed compromised
  • 12 high-value targets with password spraying
  • ARTEX agents exceeded 1,500 commands per hour
  • Backdoor BLOODALCHEMY deployed in Latin America and Middle East
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

Timeline

dated events in the reporting · oldest first
  1. Oct 17, 2026Attack begins against 200 organizations · CyberScoop, BleepingComputer
  2. Oct 30, 2026CrowdStrike reports campaign details · CyberScoop
  3. Nov 2, 2026BleepingComputer reports confirmed victims · BleepingComputer

What each outlet adds

beyond the shared facts
  • CyberScoopReports 140 targets compromised and 70% confidence
  • BleepingComputerConfirms 9 victims, AI token forging in Greek gov, BLOODALCHEMY backdoor
Vendors
CrowdStrike
Products
ARTEX AI
Threat actors
Vapor Panda
Malware
ARTEX
Organizations
CrowdStrike
Countries
ChinaUnited StatesBelgiumPhilippines
AI models
DeepSeek

Coverage

oldest first · one row per article · UTC
  1. · 3d ago CyberScoopFirst report

    Vapor Panda used agentic AI tool ARTEX against about 140 targets

    CrowdStrike says the China-linked campaign has hit more than 200 organizations in at least 14 countries since October 17.

  2. · 2h ago BleepingComputer

    Chinese hackers use ARTEX AI in automated attacks against 200 orgs

    Vapor Panda employed the ARTEX AI framework to conduct simultaneous intrusions across more than 200 organizations in 14 countries.