Security researchers found hundreds of copies of Artex, a Chinese-made AI hacking tool, exposed to the internet for anyone to access. The exposure could let outsiders launch cyberattacks against unsuspecting targets, and the software has already been tied to several attacks since its public release in July.
Artex exposure on the web
Artex is an open source autonomous penetration testing tool that automatically probes computer systems for weaknesses. It can be downloaded and run on private servers, and Microsoft has described it as a system of AI agents that can carry out cyberattacks “from reconnaissance through data exfiltration with little needed human interaction.” Because it is open source, it has also been used by people who cannot access Anthropic or OpenAI’s most advanced cybersecurity AI models for finding security vulnerabilities.
Censys findings on exposed deployments
Censys, a cybersecurity firm that scans the internet for exposed or vulnerable systems, said in a blog post that it identified more than 800 distinct Artex deployments that were reachable from the web without a password. Silas Cutler, a principal security researcher at Censys, wrote the post and said that not every Artex instance is used maliciously, since many are used by authorized testers. It remains unclear why hundreds of these systems are exposed to the web when the software does not require internet access.
How exposed systems increase risk
The exposure shows how powerful hacking tools can be misconfigured so they are available to anyone, which raises the chance that someone will find and misuse them. The public systems also expose attack tools, including implants that are hidden malicious software used to compromise a network and keep persistent access to it.
Connections to earlier attacks
Security companies have linked Artex to several broad-scale cyberattacks, including one against the Korean finance industry in September. CrowdStrike attributed that campaign to a Chinese-speaking hacker who used an Artex instance, partly because the hacker left an open directory hosting the system. Censys said its data showed that the Artex instance had been exposed for months and appeared to contain more attack data that went well beyond South Korean banks, including payment and gaming companies.
Artex was also used in an attack on IT support giant ConnectWise earlier in October. That attack let Chinese-linked hackers spy on thousands of organizations whose data and files are hosted in Microsoft’s cloud. Microsoft said in a blog post that the hackers used Artex to break into customers’ cloud environments and steal data so quickly that defenders had “little time to detect and respond.”
Weak security seen in the attacks
Many of the attacks tied to Artex involved simple weaknesses, such as guessing weak or known passwords and the absence of multi-factor authentication. The findings show that simple vulnerabilities, including misconfigurations, can expose both the attacker and the target.
What happened to Artex after the findings
Artex later said it would go closed-source, which would limit further releases for paid customers. Dozens of copies of Artex’s code are still available on code-sharing sites and can still be used in active attacks.
Licensed under CC BY-ND 4.0 International