As cited
Copy frozen at (site build).
threat intel
Hacking on Autopilot: Inside ARTEX Cybercrime Campaigns
Check Point Research analyzed over 1,600 publicly exposed instances of ARTEX, a Chinese open-source artificial intelligence (AI)-powered penetration testing platform, finding that cybercriminals use it to conduct autonomous attacks at scale. Operators set initial targets and objectives, then agents work nearly unsupervised using models like DeepSeek Flash to discover and exploit vulnerabilities including remote code execution (RCE), weak credentials, and business logic flaws. Observed campaigns targeted iOS certificate shops, cryptocurrency platforms, and gaming account databases, with some attempts at supply chain compromise, though most achieved data access rather than financial theft.
Why it matters: Organizations with exposed web infrastructure face high-volume attacks from actors using agentic frameworks to methodically test every endpoint and find vulnerabilities without requiring operator technical skill; practitioners should audit and harden systems in their exposed perimeter immediately, particularly looking for hardcoded credentials, weak authentication, and unprotected APIs.
- Source published
- First seen by Cybersecurity Tracker