ARTEX Offensive AI Tool Activity Far Exceeds Reported Campaigns
This tool, called ARTEX, is an open-source, AI model-driven, autonomous penetration testing framework released on GitHub by a user known as ‘ Autumn-27 ’ in July 2026.
This tool, called ARTEX, is an open-source, AI model-driven, autonomous penetration testing framework released on GitHub by a user known as ‘ Autumn-27 ’ in July 2026.
While ARTEX has already been integrated in several known malicious campaigns since October, a new report by internet traffic scan provider Censys estimated its use could be much more widespread than previously thought.
Written in Go with an embedded Next.js web console, ARTEX offers an offensive command-and-control (C2) platform that communicates with several AI agents and can be plugged in to large language models (LLMs).
First, in early October, CrowdStrike linked ARTEX to a campaign against South Korean financial institutions .
The analysts found ARTEX was used alongside Anthropic’s Claude AI model during the campaign, which ran from late September to early October 2026.
Later in October, Microsoft linked ARTEX to a large-scale compromise of ConnectWise customer tenants which led to IT management software provider taking a number of its cloud services offline.
More recently, on November 4, the Indian Computer Emergency Response Team (CERT-In) warned financial and cryptocurrency organizations that a threat group tracked as ‘Crafty Falcon’ had been targeting them in successive attacks using several AI-powered tools, including ARTEX.
The researcher found that 1465 hosts worldwide are exposing an ARTEX console to the public internet.
Additionally, Censys telemetry showed that 155 internet-exposed ARTEX hosts (10.6%) also run at least one other artefact categorized by Censys as a threat.
Nevertheless, the framework continues to proliferate globally via community forks, including localized variations such as ScopeWeaver and a commercial version dubbed ARTEX PRO.
These include other AI attack frameworks, reconnaissance platforms, tunneling tools and traditional malicious command-and-control (C2) servers such as Vshell, Cobalt Strike and Adaptix C2.
An asset-discovery and vulnerability-scanning platform dubbed ScopeSentry, which is maintained by the creator of ARTEX, is also listed by Censys as a threat artefact.
In a separate report , Check Point researchers showed AI agents in ARTEX control panels are running large-scale attacks with little human input for just a few hundred dollars, though they still fail and hallucinate successes.
About 650 of these hosts sit within two blocks of identically configured hosting, leaving roughly 815 distinct-looking deployments.
What happened
This tool, called ARTEX, is an open-source, AI model-driven, autonomous penetration testing framework released on GitHub by a user known as ‘ Autumn-27 ’ in July 2026.
While ARTEX has already been integrated in several known malicious campaigns since October, a new report by internet traffic scan provider Censys estimated its use could be much more widespread than previously thought.
Written in Go with an embedded Next.js web console, ARTEX offers an offensive command-and-control (C2) platform that communicates with several AI agents and can be plugged in to large language models (LLMs).
What changed
First, in early October, CrowdStrike linked ARTEX to a campaign against South Korean financial institutions .
The analysts found ARTEX was used alongside Anthropic’s Claude AI model during the campaign, which ran from late September to early October 2026.
Who is affected
Later in October, Microsoft linked ARTEX to a large-scale compromise of ConnectWise customer tenants which led to IT management software provider taking a number of its cloud services offline.
More recently, on November 4, the Indian Computer Emergency Response Team (CERT-In) warned financial and cryptocurrency organizations that a threat group tracked as ‘Crafty Falcon’ had been targeting them in successive attacks using several AI-powered tools, including ARTEX.
Why it matters
The researcher found that 1465 hosts worldwide are exposing an ARTEX console to the public internet.
Additionally, Censys telemetry showed that 155 internet-exposed ARTEX hosts (10.6%) also run at least one other artefact categorized by Censys as a threat.
Technical details
Nevertheless, the framework continues to proliferate globally via community forks, including localized variations such as ScopeWeaver and a commercial version dubbed ARTEX PRO.
These include other AI attack frameworks, reconnaissance platforms, tunneling tools and traditional malicious command-and-control (C2) servers such as Vshell, Cobalt Strike and Adaptix C2.
An asset-discovery and vulnerability-scanning platform dubbed ScopeSentry, which is maintained by the creator of ARTEX, is also listed by Censys as a threat artefact.
Response
In a separate report , Check Point researchers showed AI agents in ARTEX control panels are running large-scale attacks with little human input for just a few hundred dollars, though they still fail and hallucinate successes.
About 650 of these hosts sit within two blocks of identically configured hosting, leaving roughly 815 distinct-looking deployments.
Attribution
Infosecurity Magazine: This tool, called ARTEX, is an open-source, AI model-driven, autonomous penetration testing framework released on GitHub by a user known as ‘ Autumn-27 ’ in July 2026.
What to watch next
Watch for additional victim details, indicators of compromise and follow-on exploitation reports.