Key Points Agentic hacking platforms like ARTEX, where AI models autonomously drive vulnerability discovery and exploitation, have been observed to be used by various cyber criminals. Check Point Research’s analysis of the current landscape observed more than 1,800 publicly exposed instances for ARTEX alone, showing a massive scale of deployments.
Hacking on Autopilot: Inside ARTEX Cybercrime Campaigns
About this summary. This is a short excerpt from the description that Check Point Research published with its article. Cyber Security News did not report or verify the underlying story. Read the original: https://research.checkpoint.com/2026/hacking-on-autopilot-inside-artex-cybercrime-campaigns/
Source attribution: headline and facts are from Check Point Research (research.checkpoint.com). Summary method: excerpt of the source description. See our source attribution policy.
Related coverage
Threat Actor Abuses Agentic AI Pentesting Framework to Target South Korean Financial Institutions
IntroductionZscaler ThreatLabz analyzed a recently active exploitation campaign in which a threat actor abused ARTEX to target South Korean financial institutions. ARTEX…
AI-Driven tool ARTEX used in attacks against South Korean Banks
CrowdStrike analyzes open directories left by an attacker who used the ARTEX AI pentest tool and LLMs to breach South Korean financial firms. CrowdStrike published a…
TAG-217 Targets South Korean Financial Services with ARTEX
The threat actor linked to recent AI-assisted attacks on South Korean financial institutions was testing infrastructure and assembling attack tools as early as August…
ARTEX and Friends: Enter Agentic Offensive Frameworks
Written by: Aurora Blum, David Mainor, Rohit Nambiar, Omar ElAhdan, Matthew McWhirt, Will Silverstone, Bhavesh Dhake, Chris Busse Introduction Recent intrusions in which…
China-Linked Hackers Use ARTEX AI Agents in ConnectWise Supply Chain Attack
Microsoft on Wednesday disclosed that a China state-aligned actor dubbed Storm-0940 was behind the recent supply chain compromise of the ConnectWise Cloud Backup…
Microsoft pins ConnectWise supply-chain attack to China-state aligned threat group
Microsoft researchers attributed the recent supply-chain attack targeting ConnectWise customers’ Microsoft 365 environments to a China-state aligned threat actor it…