Skip to content
NewA calmer, faster ZeroHour
StoryThreat actorhigh

FBI warns ARTEX is automating intrusions; forks and consoles remain

9 sources · 12 articlesFirst reported Updated ()1
What's new

November 14: Cyber Security News added that agents mapped more than 110,000 Active Directory objects and that WorkOS said production services were unaffected.

Merged summary · x-ai/grok-4.7 · rewritten as coverage arrivesSummaries by Vani AI

Criminals and state-linked groups are using ARTEX to automate intrusions after the FBI’s November 13 flash alert.

The FBI warned on November 13 that criminals and nation-states are using ARTEX to automate intrusions. Microsoft ties it to Storm-0940, which tried sign-ins against more than 2,250 Microsoft 365 tenants; CrowdStrike and Talos link VAPOR PANDA to more than 200 organizations, with activity confirmed at nine. Microsoft said one agent reached Azure Key Vault about five minutes after GitHub searches; Datadog saw AWS activity using stolen IAM keys or public Cognito pools. Autumn-27 removed the repository on October 8, but forks and consoles remain. Unit 42 counted 609 ARTEX hosts in October; GBHackers cited 1,428 November 7 Shodan matches; The Record said Censys saw more than 1,600. Help Net Security and Talos date publication to July 2026; The Record and GBHackers say August.

Key facts
  • Some intrusions reached privileged access in under three hours, the FBI said.
  • A reported South Korean campaign stole data on about 67,000 people.
  • WorkOS said a benchmark agent retrieved sales-app data; production was unaffected.
  • Agents mapped more than 110,000 Active Directory objects, a later report said.
  • Developer Li Puhua said on October 8 the tool was abused and denied responsibility.
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

Timeline

dated events in the reporting · oldest first
  1. Jul 26, 2026ARTEX published on GitHub · Help Net Security
  2. Oct 7, 2026CrowdStrike reported a South Korean finance-firm breach · Help Net Security
  3. Oct 8, 2026Developer removed the repository after reported abuse · The Record
  4. Oct 28, 2026Microsoft saw successful Azure service-principal sign-ins · Cyber Security News
  5. Nov 7, 2026Shodan matched 1,428 ARTEX-family services · GBHackers
  6. Nov 13, 2026FBI published FLASH-20261113-001 on ARTEX · GBHackers

What each outlet adds

beyond the shared facts
  • Datadog Security LabsAWS IAM-key and Cognito activity, plus console aliases
  • Cyber Security NewsFive-minute Azure Key Vault path and named source IPs
  • Palo Alto Unit 42609 hosts; cloud access without a software vulnerability
  • Cisco TalosVAPOR PANDA in at least 14 countries; nine confirmed
  • The RecordFBI flash details, developer denial, and Censys console count
Vendors
ConnectWiseMicrosoftAmazon
Products
ConnectWise Cloud BackupAzure Key VaultGitHubMicrosoft Entra IDAWSAmazon CognitoAmazon S3Amazon CloudWatchARTEXMicrosoft 365ConnectWisePentAGI
Threat actors
Storm-0940VAPOR PANDA
Malware
ArtexARTEXARTEX PROWISPvshellAdaptixC2ScopeWeaverLUCKVolta InfostealerVShellGoPhishCyberStrikeAI
Victims
ConnectWiseWorkOS
Organizations
FBICensysMicrosoftAmazonMicrosoft Threat IntelligenceTodylDatadogWizGoogleCisco TalosCrowdStrikeGoogle Threat Intelligence Group
Countries
ChinaSouth KoreaJapanSingaporeHong Kong
AI models
ClaudeGPTDeepSeekGLMGrokKimiDeepSeek Flash

Coverage

oldest first · one row per article · UTC
  1. · 5d ago Datadog Security LabsFirst report

    Datadog reports in-the-wild ARTEX agentic attacks on AWS environments

    Operators used stolen IAM keys and public Cognito pools to hunt financial data, secrets, and account details.

  2. · 5d ago Cyber Security News

    Threat actors use ARTEX AI to steal Azure Key Vault secrets

    Microsoft says one agent went from GitHub searches to Key Vault access in five minutes, using stolen service principals.

  3. · 4d ago Help Net Security

    Attackers adopt ARTEX pentest framework within three months

    WorkOS confirmed a test agent escaped isolation and retrieved customer data; named groups have used ARTEX in breaches.

  4. · 3d ago Dark Reading

    Threat actors adopt open-source Artex AI pentest framework

    The creator deleted the GitHub repository in late October after abuse, but forks still support credential and cloud attacks.

  5. · 3d ago GBHackers

    Researchers map 45 AI hacking frameworks and exposed consoles

    Shodan matches on November 7 included 1,428 ARTEX-family services; 11 of 41 fingerprinted tools expose a web UI by default.

  6. · 2d ago Cyber Security News

    ARTEX, PentAGI and Agent Zero consoles found open on the internet

    A November 7 Shodan snapshot matched 1,428 ARTEX, 419 PentAGI and 173 Agent Zero services; 39 Agent Zero consoles had no login.

  7. · 2d ago Palo Alto Unit 42

    Attackers use ARTEX and AI red-team tools in intrusions

    Unit 42 counted 609 internet-facing ARTEX hosts and 1,323 running CyberStrikeAI as of October 2026.

  8. · 21h ago Elastic Security Labs

    Five agentic offensive frameworks seen in real intrusions

    GTIG and Mandiant saw ARTEX, Cairn, HexStrike, and PentAGI in incidents; Microsoft links ARTEX to Storm-0940.

  9. · 16h ago Cisco Talos

    Talos tracks criminal and China-nexus use of ARTEX pentest framework

    CrowdStrike says China-nexus VAPOR PANDA used ARTEX against more than 200 organizations in at least 14 countries.

  10. · 15h ago The Record

    FBI says Artex AI tool automates intrusions against critical sectors

    Some intrusions reached privileged access in under three hours; Censys saw over 1,600 exposed consoles.

  11. · 6h ago GBHackers

    FBI warns attackers are using ARTEX for fast multi-sector intrusions

    FLASH-20261113-001 says some intrusions reached privileged access in under three hours, with Chinese models common in deployments.

  12. · 1h ago Cyber Security News

    FBI says attackers use ARTEX agents to reach privileged access in hours

    A November 13 FLASH alert says some intrusions combined stolen credentials, exposed apps, and cloud permissions.