Hundreds of Artex AI hacking tools found publicly exposed to the web

Security researchers have discovered hundreds of copies of the Chinese-made AI hacking tool Artex publicly exposed to the internet, potentially allowing outsiders to launch cyberattacks against unsuspecting targets. Censys said it identified more than 800 distinct deployments accessible without a password, while noting that not every instance is used maliciously. The exposed systems can also reveal attack tools, including implants used to maintain persistent access to a victim's network.

What Artex is and how it spread

Artex is an open-source autonomous penetration testing tool that automatically probes computer systems for weaknesses. It has been linked to several cyberattacks since its public release in July. As open-source software, it is free to download and run on users' own servers, making it popular among those who cannot access Anthropic or OpenAI's most advanced cybersecurity AI models for discovering security vulnerabilities. Microsoft has described Artex as a system of AI agents that can conduct cyberattacks from reconnaissance through data exfiltration with little needed human interaction.

Exposed deployments and misconfiguration

Censys, which scans the internet for exposed or vulnerable systems, identified more than 800 distinct deployments of Artex accessible from the web without needing a password to log in. Silas Cutler, principal security researcher at Censys, said not every instance is operated maliciously and many are used by authorized testers. He said it is unclear why hundreds of these systems are exposed, because the software does not require them to be accessible from the internet. The findings underscore how powerful hacking tools can be misconfigured to become publicly accessible, increasing the chance that someone will find and misuse them. The publicly accessible systems also expose attack tools, such as implants, or hidden malicious software, used to compromise and maintain persistent access to a victim's network.

Links to recent attacks

Security companies have linked Artex to several broad-scale cyberattacks, including against the Korean finance industry in September. CrowdStrike attributed those attacks to a Chinese-speaking hacker who used an Artex instance, in part because the hacker had left an open directory hosting the system. Censys said its data showed that Artex instance had been publicly exposed for months and appeared to contain more attack data extending well beyond South Korean banks, including payment and gaming companies. Artex was also used in an attack on IT support giant ConnectWise earlier in October, which allowed Chinese-linked hackers to spy on thousands of organizations whose data and files are hosted in Microsoft's cloud. Microsoft said the hackers used Artex to break into customers' cloud environments and steal data at such speed that defenders had little time to detect and respond.

Simple vulnerabilities and future limits

Many attacks linked to Artex involved exploiting simple vulnerabilities, such as guessing weak or known passwords and a lack of multi-factor authentication. The findings show that simple vulnerabilities, including misconfigurations, can expose both the attacker and their targets. Artex has since announced it would go closed-source, effectively limiting further releases for paid customers. There are still dozens of copies of Artex's code available on code-sharing sites that can still be used in active attacks.

Earlier coverage: CrowdStrike: VAPOR PANDA Used AI-Driven ARTEX Against Over 200 Organizations

Sources: TechCrunch