Chinese Hackers Use ARTEX AI in Automated Attacks Against 200 Orgs
CrowdStrike said the China-nexus group used AI agents to automate reconnaissance, exploitation and credential attacks against 200-plus organizations across 14 countries.
- On Thursday, cybersecurity firm CrowdStrike reported that China-nexus threat actor Vapor Panda launched a sophisticated espionage campaign using the AI-driven tool ARTEX against more than 200 organizations across 14 countries, beginning October 17.
- ARTEX, an open-source penetration-testing framework published this year by a Chinese security engineer, automates reconnaissance and exploitation by calling the DeepSeek language model to decide each intrusion step without human typing.
- Attackers targeted pharmaceutical, defense, and government sectors, including telecom firms in the United States, Philippines, and Belgium, while deploying the BloodAlchemy backdoor at nine organizations after network scanning and password spraying.
- Researchers observed that this campaign marks a significant escalation in AI agent usage, enabling single controllers to direct simultaneous engagements as agents perform autonomous lateral movement and credential harvesting without human intervention.
- The framework enables roughly 18 new targets daily from a single controller—a pace previously requiring large teams—while researchers warn the low cost of additional attempts increases risk of widespread automated espionage campaigns.
29 Articles
29 Articles
(Seoul = Yonhap News) Reporter Kwon Ha-young = A China-linked hacking group used autonomous artificial intelligence (AI) tools to target more than 200 government agencies and companies worldwide...
Armed with AI, hackers target endpoint security blind spots, raising stakes for CISOs
A China-linked hacking group’s use of AI agents to identify security weaknesses during a global espionage campaign is raising concerns about whether enterprises can detect gaps in their defenses before automated attacks exploit them. CrowdStrike reported that the group, tracked as VAPOR PANDA, used an AI-powered penetration testing framework called ARTEX to target more than 200 organizations worldwide over an 11-day period beginning October 17. …
AI-enabled intrusion set scales targeting across 200+ organizations
Researchers tracked a China-linked campaign using the AI-powered framework ARTEX against more than 200 organizations worldwide. The activity is framed as cyber-espionage, with AI integrated into the operators’ workflow rather than a standalone...
Coverage Details
Bias Distribution
- 56% of the sources are Center
Factuality
To view factuality data please Upgrade to Premium
