Chinese state-sponsored threat actors have been using the ARTEX AI-powered penetration testing framework in attacks against high-value targets worldwide, including foreign ministries, defense, and think tank organizations.
Earlier attacks and coverage
- China-Linked Hackers Use ARTEX AI Agents in ConnectWise Supply Chain Attack (2026-10-22)
- Hackers Use Autonomous AI Agents to Breach Company Websites, Target Over 1,200 Sites (2026-10-20)
- Hackers Use New ROMULUS ClickFix Platform to Deliver LegionLoader and Other Malware (2026-10-20)
Business impact
The attacks have led to post-exploitation activities such as credential spraying and network scanning, potentially compromising sensitive data and operations of targeted organizations.
Industries affected
The targets include foreign ministries, defense, semiconductor, financial, and think tank organizations in various regions.
Users affected
Users of the targeted organizations may have their personal and organizational data compromised, leading to potential privacy and security risks.
