The PolySwarm Blog

Analyze suspicious files and URLs, at scale, millions of times per day. Get real-time threat intel from a crowdsourced network of security experts and antivirus companies competing to protect you.

ARTEX Fuels Espionage and Financial Cybercrime Campaigns

Nov 9, 2026, 2:37:14 PM / by The Hivemind posted in Threat Bulletin, credential theft, agentic AI cyberattacks, ARTEX, VAPOR PANDA, AI-assisted intrusion

0 Comments

Verticals Targeted: Government, Defense, Aerospace, Telecommunications, Technology, Software, Manufacturing, Financial, Cryptocurrency, Pharmaceuticals, Energy, Chemicals, Automotive, Legal, Media, Nuclear, Industrial Automation, Think Tanks, Nonprofits
Regions Targeted: United States, Latin America, Central America, Europe, Middle East, Asia, India, Philippines, Belgium, Greece
Related Families: BLOODALCHEMY
Related Threat Actors: Storm-0940, VAPOR PANDA, CRAFTY FALCON, UNC7228

Executive Summary

China-linked espionage actors and financially motivated cybercriminals alike are using ARTEX, an open-source agentic AI penetration testing framework, to automate intrusions against organizations worldwide. Recent campaigns demonstrate how attackers can automate reconnaissance, exploit vulnerabilities, steal credentials, escalate privileges, and establish persistence, with some ARTEX-enabled intrusions reaching deep system access in as little as 15 minutes. The growing adoption of ARTEX across distinct threat actor operations signals a shift toward machine-speed intrusions that can overwhelm traditional detection and response workflows.

Read More

Subscribe to Email Updates

Lists by Topic

see all

Posts by Topic

See all

Recent Posts