CrowdStrike: VAPOR PANDA Used AI-Driven ARTEX Against Over 200 Organizations

CrowdStrike Intelligence said the China-nexus adversary VAPOR PANDA used the AI-driven ARTEX intrusion framework to target more than 200 organizations in at least 14 countries during an 11-day window beginning October 17, 2026. In a report published October 29, 2026, CrowdStrike confirmed post-exploitation activity at nine organizations. CrowdStrike OverWatch traced the activity to a single ARTEX controller linked to VAPOR PANDA infrastructure.

Targeting and confirmed activity

At the nine organizations with confirmed post-exploitation activity, the adversary gained access, deployed the BLOODALCHEMY backdoor, and moved into credential spraying, network scanning, and reconnaissance, CrowdStrike said. The adversary also ran password-spraying and credential-scanning activity against at least 12 more organizations, including U.S.-based think tanks and government entities in Europe.

CrowdStrike reported extensive intrusions inside the foreign ministries of two Latin America-based countries, likely breached a third, and staged target files for later use against foreign ministries in Central America and Asia. The adversary also compromised a Middle East-based interior ministry, CrowdStrike said.

ARTEX operation and agent activity

CrowdStrike said VAPOR PANDA ran ARTEX primarily on the Chinese-developed DeepSeek large language model, supplemented by a second subscription-based commercial LLM that CrowdStrike Intelligence could not confirm. In a single intrusion, the adversary's planning agents consumed roughly 1.4 billion input tokens, a figure CrowdStrike said points to the scale of automated activity.

ARTEX pairs a main agent with subordinate planner and worker agents that share a graph of facts, findings, and goals, moving each engagement from initial access through host reconnaissance to lateral movement. The framework kept a human in the loop. Recovered transcripts showed an operator issuing instructions in Chinese, marked with a label translated as human instruction and timestamped in China Standard Time, telling agents to create web shells, extract domain administrator credentials, and check endpoint sensor coverage.

Sectors, malware, and assessment

CrowdStrike said one engagement focused on a single European country: its foreign ministry, presidency, and prime minister's office, plus defense, justice, finance, and intelligence entities. Another engagement went after 19 U.S.-based organizations across the pharmaceutical, semiconductor, defense, nuclear, and financial sectors. Telecommunications providers in the U.S., Belgium, and the Philippines were also compromised.

At a Middle East-based interior ministry and a Latin America-based foreign ministry, VAPOR PANDA deployed BLOODALCHEMY, a backdoor first publicly documented in October 2023. The adversary renamed a legitimate GameHook binary as svchost.exe and used it to load a malicious DLL, graphics-hook-filter64.dll, which decrypted the BLOODALCHEMY payload file graphics-hook_config.bin.

CrowdStrike assessed that China-nexus adversaries will highly likely keep adopting agentic frameworks such as ARTEX over the next 12 months, pairing them with commercially available LLMs and enabling small teams to scale intrusions across many targets at once. The report recommends rotating signing keys, preauthentication keys, and service credentials after suspected exposure, enforcing SAML signature validation, requiring IMDSv2, and deploying a real-time endpoint detection and response agent across the environment.

sitech.ge reported the October 2026 Storm-0940 attack (China-linked Storm-0940 Uses ARTEX AI Agents in ConnectWise Attack); VAPOR PANDA, a different actor, has hit over 200 organizations since 17 October 2026.

Sources: Unite.AI