Thursday 5 November
Global

Your region, kept on this device.

Check Point details ARTEX AI hacking platform used in largely autonomous cybercrime

Severity
High
Sources
1

analysed ARTEX, a Chinese open-source agentic pentest platform now abused for opportunistic cybercrime, after its developer went closed-source on 8 October following attacks on South Korean banks; public forks persist. Of 2,557 hosts seen, 1,608 panels were publicly reachable, and 10 exposed full databases revealing models (mainly Chinese, notably Deepseek Flash) and agent prompts. Agents abused web flaws such as RCE, used residential proxies, and in some cases carried out supply chain attacks. Defenders should keep agentic testing panels off the internet and review exposed admin interfaces.

For security analysts · Written by AI from 1 source · Wrong?

What to do

  1. Check whether any ARTEX or similar agentic testing panels are exposed to the internet and remove public access.
  2. Restrict administrative interfaces to internal networks or behind firewalls.

Written by AI from the sources, checked against them

Full story timeline · 1 update

  1. Thu 5 NovemberHacking on Autopilot: Inside ARTEX Cybercrime CampaignsCheck Point Research

Who reported · 1 outlet

Check Point Research

Who and what is in it

Report a problem