Thursday 5 November
Global

Your region, kept on this device.

Check Point details ARTEX AI hacking platform used in largely autonomous cybercrime

Severity
High
Sources
1

reports that ARTEX, an open-source LLM-driven penetration testing platform, is being abused by cybercriminals, with 2,557 systems found hosting ARTEX panels and 1,608 still publicly reachable. Operator console data shows attacks were nearly fully autonomous, with Chinese models such as Deepseek Flash the most common, and campaigns targeting cryptocurrency, code-signing certificates and gaming accounts, plus DoS attacks on gambling sites.

For IT people · Written by AI from 1 source · Wrong?

What to do

  1. Check whether any ARTEX or similar agentic testing panels are exposed to the internet and remove public access.
  2. Restrict administrative interfaces to internal networks or behind firewalls.

Written by AI from the sources, checked against them

Full story timeline · 1 update

  1. Thu 5 NovemberHacking on Autopilot: Inside ARTEX Cybercrime CampaignsCheck Point Research

Who reported · 1 outlet

Check Point Research

Who and what is in it

Report a problem