Security researchers at Censys discovered more than 800 publicly accessible deployments of Artex, a Chinese-made open source AI penetration testing tool, exposed to the internet without password protection.
Artex automatically probes computer systems for weaknesses. Microsoft previously described it as a system of AI agents capable of conducting cyberattacks "from reconnaissance through data exfiltration with little needed human interaction." The tool became publicly available in July and has been linked to multiple cyberattacks.
Silas Cutler, principal security researcher at Censys, noted that not every exposed instance operates maliciously, with many used by authorized security testers. However, the software does not require internet accessibility, making the hundreds of exposed deployments unusual.
CrowdStrike attributed September cyberattacks on the Korean finance industry to a Chinese-speaking hacker using an exposed Artex instance. Censys found that instance had been publicly exposed for months and contained attack data reaching "well beyond South Korean banks," including payment and gaming companies.
In October, hackers used Artex to attack ConnectWise, an IT support company, gaining access to thousands of organizations' data stored in Microsoft's cloud. Microsoft stated the attackers moved with such speed that defenders had "little time to detect and respond."
Many Artex-linked attacks exploited simple vulnerabilities like weak passwords and missing multi-factor authentication. The exposed systems also revealed attack tools including implants used to maintain persistent network access.
Artex announced it would transition to closed-source, limiting releases to paid customers. Dozens of copies of its code remain available on code-sharing sites for use in active attacks.