Chinese Hackers Use ARTEX AI in Attacks on 200 Orgs
A China-nexus threat actor tracked as Vapor Panda has utilized the ARTEX AI framework to conduct automated cyberattacks against more than 200 organizations across 14 countries.
Radwan AbdulhadiEditor and technology writer
Global Campaign Targets Critical Sectors
A sophisticated cyber espionage campaign orchestrated by Chinese hackers has targeted more than 200 organizations across 14 countries. According to research from CrowdStrike says, the operation began on October 17 and focused heavily on government ministries, telecommunications providers, and organizations operating within the pharmaceutical, semiconductor, defense, nuclear, and financial sectors. Further details are available from BleepingComputer in the original source material.
The threat actor, tracked by researchers as Vapor Panda, successfully compromised at least nine organizations during the sweep. Additionally, the actors carried out password spraying attacks and credential scanning activity against at least 12 other high-value targets globally. Confirmed victims of the campaign include telecommunications providers located in the United States and Belgium, government organizations in Greece, the Middle East, and Latin America, and pharmaceutical firms based in the U.S.
Escalation in AI-Driven Cyber Operations
Security researchers note that this multi-country campaign marks a significant escalation in how China-nexus groups utilize AI agents. Rather than relying solely on traditional manual intrusions, the operations involved multiple simultaneous engagements directed by human operators who issued instructions in Chinese and intervened at critical decision points.
In orchestrating these cyberattacks, Vapor Panda used ARTEX, an open-source, multi-agent AI penetration-testing framework. Originally released as an open-source project by Chinese developers, ARTEX was later made proprietary following its utilization in real-world attacks, including a previous campaign against South Korean financial institutions.
Multi-Model Coordination and Autonomous Capabilities
During the recent espionage operations, Vapor Panda did not rely on ARTEX alone. The threat actor also employed DeepSeek alongside a second, unidentified commercial language model to coordinate planning and worker agents across multiple intrusions simultaneously.
The deployed AI agents possessed extensive autonomous capabilities. They performed reconnaissance, exploited vulnerabilities, deployed web shells, obtained credentials, and pursued alternative attack paths when necessary. In one specific intrusion, researchers estimate that the AI agents consumed more than 1.4 billion input tokens.
Evasion Tactics and Specific Breaches
Throughout the campaign, the human operators explicitly instructed the AI agents to skip Windows machines protected by Falcon, CrowdStrike's solution for endpoint protection, directing their focus entirely toward unprotected hosts.
In an attack targeting a Greek government entity, the AI agents managed to forge an administrator token and read mailboxes by leveraging authentication keys obtained from a 2022 mail-server directory export. Furthermore, the threat actor deployed BLOODALCHEMY, a backdoor active since 2023, against government entities located in Latin America and the Middle East.
Insights from Non-Profit Security Disclosures
Additional technical details regarding the capabilities of automated AI agents have emerged from the Dutch Institute for Vulnerability Disclosure (DIVD). The organization shared extensive information concerning the security incident it suffered in September 2026, which researchers attributed to an autonomous AI agent utilizing the ARTEX framework.
According to DIVD, the AI-driven network breach went from initial access to root privileges in a mere 12 minutes by chaining a Zammad zero-day vulnerability with a second zero-day designed for local privilege escalation. The fully autonomous agent executed numerous tasks simultaneously, including reading a compromised mailbox, scanning the internal network, extracting login tokens, and attempting password resets, generating a massive trail of telemetry data.
Sources
- BleepingComputerChinese hackers use ARTEX AI in automated attacks against 200 orgs
Continue chronologically
Related stories
ARTEX AI and Claude Agents Used in South Korean Bank Attacks
A Chinese hacker used the ARTEX AI penetration testing suite and Claude agents to target multiple South Korean banks, exposing client data and system outages.
Chinese Hackers Exploited Low-Severity ESXi Logging Flaw as Zero-Day
CISA warns that China-nexus threat actor Warp Panda exploited a low-severity VMware ESXi logging flaw, tracked as CVE-2026-41709, as a zero-day.
CrowdStrike Acquires Fiddler and Dreadnode for $495 Million
CrowdStrike announced agreements to acquire AI observability firm Fiddler and security testing startup Dreadnode in deals reportedly worth $495 million.
Zammad Zero-Days Exploited in AI-Powered DIVD Hack
The Dutch Institute for Vulnerability Disclosure was targeted in an automated AI-powered attack leveraging two Zammad zero-day flaws.
