Hundreds of Artex AI hacking tools found publicly exposed to the web

What happened

Security researchers identified over 800 instances of the Artex AI hacking tool, developed in China, that were left publicly accessible on the internet. Artex is an open-source tool used for automated penetration testing and has been linked to several cyberattacks since its release in July. The exposed systems did not require a password, making them accessible to anyone online. Some of these exposed Artex deployments have been connected to attacks on industries such as finance and IT support.

Key details

• More than 800 Artex instances were found exposed online without password protection.
• Artex is a Chinese open-source AI tool for autonomous penetration testing, released in July.
• The tool has been linked to attacks on the Korean finance industry and IT support company ConnectWise.
• CrowdStrike and Microsoft have attributed some cyberattacks to hackers using Artex.
• Artex announced it would become closed-source, but its code remains available on code-sharing sites.

Why it matters

Organizations and individuals running Artex face the risk of their systems being hijacked or misused by outsiders due to these public exposures. Companies in sectors like finance and IT support have already been targeted by attackers leveraging exposed Artex instances, resulting in data theft and unauthorized access. The continued availability of Artex's code on public sites means the risk of similar incidents remains for businesses and security teams.