Researchers Find Hundreds of Exposed Artex AI Hacking Tools Online

Security researchers have found hundreds of copies of Artex, an open-source autonomous penetration testing tool, publicly exposed to the internet.

What researchers found

Censys, a cybersecurity firm that scans the internet for exposed systems, identified more than 800 distinct deployments of Artex accessible from the web without a password. A separate report described 1,465 internet-facing hosts running the ARTEX AI-powered penetration-testing framework. After removing roughly 650 hosts that shared repeated configurations across two hosting providers, the count left approximately 815 distinct-looking deployments.

The exposed systems included attack tools such as implants, Windows lateral-movement tools, Linux implants, reverse-shell scripts, and compiled stagers. Researchers found 32 open directories exposing tools, implants, and operator files. Across the broader dataset, 155 hosts, or 10.6% of the total, carried another Censys threat detection.

Linked attacks

CrowdStrike linked ARTEX infrastructure to attacks against South Korean financial organizations during late September and early October. The actor’s ARTEX server, 38.244.50[.]120, used DeepSeek v4.1-flash, apparently accessed through an API reseller. CrowdStrike assessed with moderate confidence that the unattributed operator was financially motivated and Chinese-speaking.

Microsoft attributed the ConnectWise Cloud Backup supply-chain compromise to China-aligned Storm-0940. Censys researchers said the actor used ARTEX to accelerate reconnaissance, password spraying, and OAuth application abuse, attempting authentication against more than 2,250 customer tenants. Some intrusions reached privileged cloud access within three hours.

What the researchers say

Silas Cutler, principal security researcher at Censys, said not every instance of Artex is operated maliciously and many are used by authorized testers. Censys described ARTEX as a dual-use framework, not a malware family. Microsoft has previously described Artex as a system of AI agents that can conduct cyberattacks “from reconnaissance through data exfiltration with little needed human interaction.”

Why it matters

The publicly accessible systems increase the chance that someone will find and misuse them. The exposed directories also reveal attack tools and operator files. Researchers caution that public exposure alone does not establish malicious activity, since authorized security testers can use ARTEX.

---

Sources

• techcrunch.com: Hundreds of Artex AI hacking tools found publicly exposed to the web | TechCrunch
• cybersecuritynews.com: ARTEX AI Hacking Framework Found on 1,465 Public Servers, Some Hosting Cyberattack Tools
• gbhackers.com: ARTEX AI Framework Linked to Bank Breaches and Cloud Attacks Found Exposed Across Hundreds of Servers

This article was drafted with AI assistance and checked against the sources above. Company claims are reported as claims. Cover image is AI-generated.