ARTEX agents stole gaming logins and Apple signing certificates
First merged summary.
Check Point says ARTEX AI agents stole over 190,000 Honor of Kings credentials and more than 300 Apple certificates.
Check Point says criminals used ARTEX, an AI penetration-testing platform, with little human input to break into sites. Agents took more than 190,000 Honor of Kings credential sets—about 3.3 percent, roughly 6,000, still worked—and more than 300 Apple code-signing certificates, three of which still validated. A gaming run against 13 servers lasted about five days and cost an estimated $180 to $360; a certificate run used DeepSeek v4.1 Flash and Kimi K3.1 Pro and about 36 billion tokens. Check Point found 2,557 ARTEX hosts, 1,608 live, 882 of them in the United States; 10 exposed full databases. One agent wrote to an S3 bucket with 714 enterprise-signed iOS app pages before owners restored the manifest, and a run against 292 crypto domains moved no money.
- More than 190,000 Honor of Kings logins; about 6,000 still worked.
- More than 300 Apple certificates taken; three still validated.
- 2,557 ARTEX hosts found; 1,608 live; 10 databases exposed.
- Gaming run hit 13 servers over five days, costing about $180–$360.
- Certificate run used about 36 billion tokens on DeepSeek and Kimi.
- An agent wrote 714 signed iOS app pages; the manifest was restored.
What each outlet adds
beyond the shared facts- Cyber Security NewsHost counts, token use, campaign cost, S3 write, and failed crypto run.
- GBHackersSays stolen certificates were validated for iOS sideloading.
- Vendors
- Apple
- Products
- Honor of Kings
- Malware
- ARTEX
- Organizations
- Check Point
Coverage
oldest first · one row per article · UTCAI Agents Target Gaming Accounts and Apple Certificates
ARTEX agents stole 190000 Honor of Kings credentials and 300 signing certificates from gray-market shops.
ARTEX AI agents steal gaming logins and Apple certificates
Check Point says agents took over 190,000 Honor of Kings credential sets; about 3.3 percent, roughly 6,000, still worked.