High · 1 source · latest 2h

ARTEX AI pentest tool abused to steal gaming logins and Apple signing certificates

AI SECURITYCheck Pointredteam/daily · 1 source

Severity: High
Sources: 1

What happened

ARTEX, an AI-driven pentest framework whose developer made it closed-source on 8 October, is being abused for automated intrusion. Check Point found 2,557 hosts with ARTEX panels, 1,608 live, and observed campaigns using DeepSeek and Kimi models that exploited hardcoded admin credentials, unauthenticated APIs, command injection, IDOR, SSTI and permission flaws, and harvested .p12 certificate libraries and a 21.5 MB plaintext credential file. Defenders should rotate exposed secrets, remove hardcoded credentials from front-end code, require authentication on every API, test internet-facing systems and alert on sudden request bursts. The article lists IoCs as defanged IP ranges and version tags, and no CVE IDs are given.

For security analysts · Written by AI from 1 source · Wrong?

What to do

Find and rotate any exposed secrets, including passwords, keys and certificates.
Remove hardcoded credentials from front-end and JavaScript code.
Require authentication on every API endpoint.
Test internet-facing systems and watch for sudden bursts of requests.

Written by AI from the sources, checked against them

Read the full story at the source