Hacking on Autopilot: Inside ARTEX Cybercrime Campaigns
AI-powered hacking platform ARTEX observed in widespread cybercrime campaigns.
The AI-powered penetration testing platform ARTEX, originally designed for security teams, is now being widely used by cybercriminals for autonomous attacks. Check Point Research found over 1,800 exposed instances of ARTEX, with threat actors setting initial goals and allowing AI agents to autonomously discover and exploit vulnerabilities, primarily for financially motivated cybercrime. The platform's open-source nature and ease of use have led to its adoption by actors with limited technical expertise, enabling attacks at unprecedented speed and scale, including supply chain compromises.
AI summary of the linked source. Not reviewed by an editor. How this works
Run ARTEX?
Get an email when a new story names ARTEX, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonARTEX, an open-source AI-powered penetration testing platform, has been repurposed by cybercriminals who are exploiting over 1,800 publicly exposed instances to conduct autonomous, goal-directed attacks with minimal human involvement. The root problem is twofold: organizations failed to secure or restrict access to a powerful dual-use tool, and the platform's low barrier to entry has democratized sophisticated attack capabilities for even low-skill threat actors. This matters because AI-driven automation compresses the attack lifecycle dramatically, leaving defenders far less time to detect and respond. The inclusion of supply chain compromise as an attack vector means the blast radius extends well beyond individual victims.
What helps against this
How we list vendors
- Vulnerability scanning and prioritisation
You know which systems are vulnerable, and which ones to fix first.
- Endpoint detection and response (EDR and XDR)
Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.
- AI application security
Prompt injection, data leaks through AI tools and unapproved AI use get caught.
Indicators of Compromise
Extracted by AI from the linked source. Not reviewed by an editor. How this works
- malware — ARTEX