---
title: ARTEX Fuels Espionage and Financial Cybercrime Campaigns
description: China-linked espionage actors and financially motivated cybercriminals are using ARTEX, an open-source agentic AI penetration testing framework, to automate intrusions against organizations worldwide.
---

[Insights, news, education and announcements from PolySwarm](https://blog.polyswarm.io)

# [ARTEX Fuels Espionage and Financial Cybercrime Campaigns](https://blog.polyswarm.io/artex-fuels-espionage-and-financial-cybercrime-campaigns)

 Written by [The Hivemind](https://blog.polyswarm.io/author/the-hivemind) | Nov 9, 2026, 7:37:14 PM

**Verticals Targeted:** Government, Defense, Aerospace, Telecommunications, Technology, Software, Manufacturing, Financial, Cryptocurrency, Pharmaceuticals, Energy, Chemicals, Automotive, Legal, Media, Nuclear, Industrial Automation, Think Tanks, Nonprofits  
**Regions Targeted:** United States, Latin America, Central America, Europe, Middle East, Asia, India, Philippines, Belgium, Greece  
**Related Families:** BLOODALCHEMY  
**Related Threat Actors:** Storm-0940, VAPOR PANDA, CRAFTY FALCON, UNC7228

## **Executive Summary**

## China-linked espionage actors and financially motivated cybercriminals alike are using ARTEX, an open-source agentic AI penetration testing framework, to automate intrusions against organizations worldwide. Recent campaigns demonstrate how attackers can automate reconnaissance, exploit vulnerabilities, steal credentials, escalate privileges, and establish persistence, with some ARTEX-enabled intrusions reaching deep system access in as little as 15 minutes. The growing adoption of ARTEX across distinct threat actor operations signals a shift toward machine-speed intrusions that can overwhelm traditional detection and response workflows.

**Key Takeaways**

- China-linked Storm-0940 and VAPOR PANDA have conducted separate ARTEX-enabled campaigns, while Google has observed financially motivated extortion actors using ARTEX and CERT-In has linked the framework to a broader financial cybercrime campaign.
- ARTEX automates reconnaissance, permission testing, credential theft, privilege escalation, lateral movement, and other post-compromise activities, adapting its approach when commands fail.
- Microsoft observed privileged cloud access in under three hours, while Google cited research documenting deep system access in as little as 15 minutes.
- Observed campaigns have targeted government agencies, defense contractors, semiconductor manufacturers, financial institutions, telecommunications providers, and pharmaceutical organizations across multiple regions.

**What is ARTEX?**

ARTEX is an open-source penetration testing framework that uses multiple large language model (LLM)-driven agents to automate offensive security operations. Written in Go with a Next.js interface, the framework coordinates specialized agents through a shared graph of discovered assets, vulnerabilities, and operational findings.

Rather than requiring an operator to manually execute each stage of an intrusion, ARTEX translates high-level objectives into individual tasks. Its agents can enumerate infrastructure, test credentials, identify attack paths, generate scripts, troubleshoot errors, and execute follow-on commands with limited human intervention.

Google Threat Intelligence Group (GTIG) [describes](https://cloud.google.com/blog/topics/threat-intelligence/artex-and-friends-enter-agentic-offensive-frameworks) ARTEX as coordinating six specialized sub-agents. The framework supports multiple LLM providers, allowing operators to select or combine different models, while recovered operational transcripts demonstrate that human operators can continue directing objectives and intervening during execution. CrowdStrike [observed](https://www.crowdstrike.com/en-us/blog/vapor-panda-uses-artex-to-scale-global-campaign/) China-nexus actor VAPOR PANDA using DeepSeek alongside a second, unidentified commercial LLM during a campaign involving more than 200 organizations.

According to Google, ARTEX was originally developed by GitHub user Autumn-27. Its original repository was removed in October 2026 following widespread malicious adoption, but community forks and commercial variants, including ScopeWeaver and ARTEX PRO, have continued circulating. ARTEX is not malware itself. It is a dual-use offensive security framework that threat actors are repurposing to automate established intrusion techniques at substantially greater speed and scale.

**China-Linked Actors Deploy ARTEX Across Global Campaigns**

Microsoft [identified](https://www.microsoft.com/en-us/security/blog/2026/10/21/storm-0940-uses-artex-agentic-ai-connectwise-supply-chain-compromise/) China state-aligned Storm-0940 using ARTEX as early as September 2026 to target hundreds of organizations across industries including government, defense, technology, manufacturing, and financial services. The actor historically relied on password spraying, exploitation of internet-facing applications, and compromised credentials. ARTEX accelerated these techniques, enabling automated reconnaissance, authentication attempts, and cloud privilege manipulation.

Microsoft assesses that Storm-0940 was responsible for the October 2026 ConnectWise supply chain compromise involving cloud backup applications. After obtaining compromised application credentials, the actor used ARTEX to attempt authentication against more than 2,250 downstream Microsoft 365 tenants. Because the affected applications already possessed authorized access, the actor could authenticate without interactive user sign-ins. In several environments, subsequent Microsoft Graph activity included directory reconnaissance, application credential changes, and attempts to modify privileges, potentially enabling persistent access.

Microsoft also observed a related password-spraying operation that generated more than 151,000 failed authentication attempts against 327 accounts across eight organizations between October 10 and 14. Activity peaked at approximately 2,900 failures per minute, although no successful authentication was observed in that particular campaign. Microsoft emphasized that successful authentication through an affected application did not necessarily indicate that customer data had been accessed or exfiltrated.

Separately, CrowdStrike OverWatch identified VAPOR PANDA conducting ARTEX-enabled intrusions beginning October 17, 2026. The actor targeted more than 200 organizations across at least 14 countries, including foreign ministries, defense organizations, semiconductor manufacturers, telecommunications providers, and pharmaceutical companies. CrowdStrike confirmed post-exploitation activity at nine organizations and documented the deployment of the BLOODALCHEMY backdoor at a Middle Eastern interior ministry and a Latin American foreign ministry. The malware was deployed through DLL sideloading using a legitimate GameHook executable renamed svchost.exe, a malicious DLL named graphics-hook-filter64.dll, and an encrypted payload file named graphics-hook\_config.bin.

Recovered ARTEX transcripts showed VAPOR PANDA operators issuing instructions in Chinese to generate web shells, retrieve privileged credentials, and identify Windows systems without CrowdStrike Falcon endpoint protection. CrowdStrike explicitly distinguishes VAPOR PANDA's campaign from Storm-0940 activity. The separate operations demonstrate how multiple China-nexus actors are independently adopting the same agentic offensive framework.

**ARTEX Adoption Extends to Financially Motivated Operations**

Google and Mandiant have observed ARTEX use in incident response engagements since late August 2026, including activity associated with financially motivated extortion groups and additional suspected espionage operators. Observed operations involved cloud permission enumeration, Active Directory reconnaissance, credential theft, persistence, lateral movement, and preparation for data exfiltration.

In one case, ARTEX manipulated MySQL logging functionality to generate JSP web shells. When execution failed, the framework repeatedly modified its scripts and generated new files until it achieved working command execution. Other investigations documented automated cloud permission testing, account creation, and abuse of legitimate application features. In one instance, ARTEX triggered an internal notification system to send test messages to more than 1,300 recipients.

India's CERT-In [identified](https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES02&VLCODE=CIAD-2026-0058) ARTEX among several AI-driven offensive frameworks used in an ongoing financial cybercrime campaign attributed to CRAFTY FALCON. Its November 4 advisory describes attacks against financial institutions, payment providers, fintech companies, and cryptocurrency services involving cloud infrastructure abuse, unauthorized payment API activity, and wallet credential theft. The campaign also involved PentAGI, CAIRN, and CyberStrikeAI. CERT-In did not identify which individual attack techniques were performed by ARTEX rather than the other frameworks involved.

Attackers conducted small-value transactions to validate unauthorized fund transfers before attempting larger transactions. CERT-In also warned that some organizations were targeted again following incomplete remediation, with attacks timed around holidays, weekends, and periods of reduced security monitoring.

**Machine-Speed Intrusions Compress the Response Window**

The defining advantage of ARTEX is its ability to combine established intrusion techniques without requiring continuous human execution. Once an attacker obtains credentials or an initial foothold, ARTEX can test available permissions, enumerate resources, identify additional attack paths, and execute follow-on commands in rapid succession.

Microsoft observed Storm-0940 progress from initial targeting to privileged cloud access in less than three hours in multiple cases. Google also cited Wiz research on overlapping activity tracked as UNC7228, documenting progression from an initial compromised account to deep system access in approximately four hours, including one case requiring only 15 minutes. Mandiant observed individual ARTEX execution bursts lasting approximately 2 to 25 seconds. One operation generated 27 events within 23 seconds while probing AWS permissions.

These operations are not necessarily stealthy. Google documented hundreds of log events, repeated execution errors, and instances where ARTEX agents appeared to interfere with one another. However, high-volume activity does not guarantee timely containment. An attacker can progress through multiple intrusion stages before analysts complete investigation and response, even when the activity generates detectable signals. This changes the defensive challenge from identifying suspicious activity alone to restricting how quickly compromised identities and applications can access additional resources.

ARTEX's adoption by multiple threat actors indicates that agentic AI is becoming an operational component of cyber espionage and financially motivated intrusions rather than remaining an experimental capability. The framework does not eliminate the need for initial access, vulnerable systems, or compromised credentials. Instead, it allows attackers to exploit those opportunities more quickly, pursue multiple attack paths simultaneously, and reduce the manual effort required to compromise additional systems.

Observed implementations often generate substantial forensic noise, while the degree of human oversight varies between campaigns and operational phases. Nevertheless, continued development of agent coordination, model capabilities, and execution reliability could enable more sophisticated attacks with less operator involvement. Organizations relying on long-lived credentials, excessive application privileges, exposed management interfaces, and manual containment processes may face increasing difficulty preventing automated intrusions from progressing to privileged access, persistence, or data theft.

**PolySwarm Analyst Commentary**

ARTEX represents a significant evolution in how threat actors operationalize artificial intelligence. Rather than introducing fundamentally new exploitation techniques, the framework allows adversaries to automate established attack methods, coordinate multiple intrusion paths, and adapt their tooling at speeds that can outpace traditional security operations. Its adoption by both espionage operators and financially motivated cybercriminals demonstrates how accessible agentic frameworks are expanding the scale and speed of offensive operations.

The broader implications extend beyond the campaigns observed to date. As agentic frameworks become more reliable and require less human intervention, threat actors may be able to conduct more simultaneous intrusions, move more quickly between initial access and their objectives, and continuously adapt their techniques in response to defensive controls. The availability of open-source frameworks and commercial variants could also lower the technical and operational barriers for less sophisticated actors, potentially expanding the number of adversaries capable of conducting complex, multi-stage attacks. Although current implementations frequently generate substantial forensic noise, improvements in agent coordination and execution could make future operations more selective and difficult to detect.

These developments may also change the economics of cybercrime and espionage. Operations that previously required considerable operator time and expertise could become easier to scale, allowing attackers to revisit previously unsuccessful targets, exploit newly discovered weaknesses more rapidly, and maintain pressure across multiple environments. Defenders may increasingly face intrusions in which the interval between initial compromise, privilege escalation, and persistence is too short for conventional manual investigation and response.

The deployment of BLOODALCHEMY during VAPOR PANDA's campaign and Google's observations of automatically generated web shells illustrate how AI-driven intrusions can combine conventional malware with rapidly modified scripts and payloads. Although ARTEX itself is not malware, the malicious artifacts deployed during these operations remain important opportunities for detection and investigation. As adversaries increasingly automate payload generation and modification, relying exclusively on familiar malware signatures or a single detection perspective creates potential gaps in visibility.

PolySwarm helps organizations address these detection gaps through its crowdsourced threat detection marketplace, bringing together multiple independent detection engines to identify malicious files and emerging threats. By leveraging diverse detection approaches rather than relying on a single engine, security teams can gain additional insight into suspicious artifacts, uncover potentially missed threats, and strengthen their existing security workflows.

**IOCs**

PolySwarm has two of the VAPOR PANDA samples associated with this activity, as identified by CrowdStrike.

 

3fb5a9fb3e2cb1d6208966bd4e55d10282d19c7250d827efa560463d60a12ee4 - BLOODALCHEMY loader DLL

49fe70419fd19b81ca8d730a6ef7c1ec71b681d60b390761070d42686c7d2068 - GameHook binary (svchost.exe)

 

***Don’t have a PolySwarm account? Go*** [**here**](https://polyswarm.network/?__hstc=222807940.d76e0d027694f1f067a520c263d793ab.1752859606844.1793384101892.1793640782012.276&__hssc=222807940.1.1793640782012&__hsfp=6e260c68014e53dc14386db5b73c165a) ***to sign up for a free Community plan or subscribe.***

***Contact us at*** [**hivemind@polyswarm.io**](mailto:hivemind@polyswarm.io) ***| Check out our*** [**blog**](https://blog.polyswarm.io/) *|* [**Subscribe**](https://polyswarm.io/ransomwarereport/) ***to our reports.***

 

[View full post](https://blog.polyswarm.io/artex-fuels-espionage-and-financial-cybercrime-campaigns)

```json
{
  "@context" : "http://schema.org",
  "@type" : "BlogPosting",
  "author" : {
    "@type" : "Person",
    "name" : "The Hivemind"
  },
  "dateModified" : "2026-11-09T19:37:14.608Z",
  "datePublished" : "2026-11-09T19:37:14Z",
  "headline" : "ARTEX Fuels Espionage and Financial Cybercrime Campaigns",
  "image" : {
    "@type" : "ImageObject",
    "height" : 900,
    "url" : "https://5737925.fs1.hubspotusercontent-na1.net/hubfs/5737925/Threat%20Bulletins/Threat%20Bulletin%20Images/ARTEX%202026.jpg",
    "width" : 1600
  },
  "mainEntityOfPage" : "https://blog.polyswarm.io/artex-fuels-espionage-and-financial-cybercrime-campaigns",
  "publisher" : {
    "@type" : "Organization",
    "logo" : {
      "@type" : "ImageObject",
      "height" : 60.0,
      "url" : "https://cdn2.hubspot.net/hubfs/5737925/Social%20Icons_PS-1.png",
      "width" : 59.820896
    },
    "name" : "The PolySwarm Blog"
  }
}
```