Chinese hackers use AI framework ARTEX to target over 200 organizations

Chinese state-sponsored hackers have used an artificial intelligence framework called ARTEX to target over 200 high-value organizations simultaneously, according to reports from The Hacker News, Security Boulevard, and Cryptopolitan. The Hacker News reported that post-exploitation activity was confirmed at nine of those targeted entities. [1][4][5]

The Hacker News reported that cybersecurity firm CrowdStrike attributed the activity to a China-based group tracked as Vapor Panda, previously known as VexatiousTemper. The Hacker News added that the group was first identified in February 2021 and overlaps with a threat cluster called Earth Estries, which was detailed by Trend Micro. [1]

The ARTEX tool is a Go-based artificial intelligence penetration testing framework that uses AI agents, according to The Hacker News. CrowdStrike noted that agentic tooling like ARTEX enables hackers to expand the scale of their operations. [1]

The global spread of AI-driven cyber attacks comes as related reports highlight broader risks. GBHackers News reported that Japan is facing an increasing cyber attack crisis as AI tools assist hackers in targeting businesses and government agencies. Additionally, Cyber Press reported that Sophos revealed how ransomware hackers use AI agents to bypass security systems and gain domain administrator access. [2][3]