Researchers found over 1,400 exposed ARTEX instances online, with many linked to offensive security tooling
ARTEX combines AI agents with reconnaissance capabilities and has been increasingly adopted in real-world attacks
Some operators accidentally exposed malware, exploits, credentials, and internal infrastructure through misconfigured servers
Around 1,500 malicious instances of ARTEX were found on the internet, available to anyone who knew where to look, experts have warned. Security researchers Censys said they identified 1,465 hosts running exposed ARTEX consoles. Of those, 155 (roughly 10%) were also running at least one tool commonly used in cyberattacks, including Cobalt Strike, Vshell, or Adaptix C2. They also found 32 publicly accessible directories on ARTEX hosts, some of which exposed exploit binaries, post-exploitation tools, and other sensitive files. Usually, the ARTEX console does not require public-facing access, the researchers said, stressing that overall global deployment is “likely higher”. Hijacking ARTEX
ARTEX is a legitimate penetration testing tool hijacked for malicious purposes, meaning at least some of these instances were set up by threat actors. The story of ARTEX is similar to that of the now infamous Cobalt Strike. It was released by a developer called Autumn-27, who also authored ScopeSentry – a tool Censys describes as a “widely used Chinese asset-discovery and vulnerability-scanning platform”. The researchers described ARTEX as an “AI agent layer on top of that recon foundation”. In other words – it is an LLM-powered version of Scope Sentry that syncs assets found by the tool’s domains, subdomains, IPs, ports, and endpoints. ARTEX was released in late July 2026 and quickly gained popularity. On October 7, security researchers CrowdStrike reported seeing it used in malicious attacks and a day later, the developer distanced themselves from the illicit activity and stressed the tool was built for testing within authorized asset scopes. They then turned it into a closed-source tool with no further releases. However, despite the repository being taken down, Censys claims archived copies, translations, and different rebrands are still circulating…