ARTEX, an AI-driven offensive framework, turns up in far more hosts than the attacks first reported
Ourtake
Offensive AI tooling is spreading across hundreds of hosts, and some are already tied to attacks on financial institutions and IT providers.
What happened
Threat actors used ARTEX, an open-source AI-driven penetration testing framework, in campaigns against South Korean financial institutions and in a compromise of ConnectWise customer tenants. Censys found 1465 hosts worldwide exposing an ARTEX console, suggesting use well beyond the campaigns first identified.