Chinese hackers use ARTEX AI in automated attacks against 200 orgs

BleepingComputer reports that Chinese hackers used ARTEX, described in the article as an open-source multi-agent AI penetration-testing framework, in attacks against more than 200 organisations across 14 countries. The headline of the report characterises the activity as automated attacks. According to the article, the operation began on October 17.

The targets listed in the report include government ministries, telecommunications providers, and organisations in the pharmaceutical, semiconductor, defence, nuclear and financial sectors. ARTEX is described as a penetration-testing framework that uses multiple AI agents, and as open source. The excerpt does not name the individual organisations affected, does not identify a named threat group behind the campaign, and does not state which of the targeted organisations, if any, were successfully compromised.

The article's account is limited to the tool used, the number of organisations and countries said to be involved, the stated start date of October 17, and the categories of target. Penetration-testing frameworks are tools built to probe networks for weaknesses; the report describes ARTEX as one such framework and as open source. It does not report the volume of data or systems affected, does not name any of the more than 200 organisations, and does not describe any government, vendor or law enforcement response to the campaign. The report attributes the activity to Chinese hackers and gives no further attribution detail in the excerpt.