Attackers use open-source ARTEX AI agent to automate Active Directory attacks
AI SECURITYActive Directoryredteam/daily · 1 source
- Severity
- High
- Sources
- 1
What happened
Criminals and some state-linked groups are using an AI-based hacking tool called ARTEX to break into Windows networks with little human help. It can map a network, steal service account passwords and try to take control of the main servers that run the network, all in seconds.
Like I’m new · Written by AI from 1 source · Wrong?
What to do
- Isolate administrative systems and use short-lived credentials with limited access.
- Segment networks to restrict lateral movement toward domain controllers.
- Hunt for ArtexProbe account names, artex-probe- files and the listed JSP web shell names.
- Alert on MySQL generallog changes that write .jsp files and on curl traffic to webhook.site.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
Cyber Security News
Who and what is in it
Malware
Products