Hackers use open-source ARTEX AI pentest platform to automate account and certificate theft
AI SECURITYredteam/daily · 1 source
- Severity
- High
- Sources
- 1
What happened
ARTEX, an open-source Chinese agentic penetration-testing platform, is being abused to run autonomous attacks in which operators set a goal and mostly monitor progress, with campaigns reported to steal gaming accounts and Apple signing certificates. Researchers identified 2,557 systems hosting or having hosted ARTEX panels, 1,608 of them live and publicly reachable. Ten misconfigured instances exposed full databases containing models, prompts and actions. The article gives no CVE, affected version or detailed IOCs, so defenders should check for exposed ARTEX panels and review any Apple signing certificate or account activity.
For security analysts · Written by AI from 1 source · Wrong?
What to do
- Check whether any ARTEX panels are running in your environment or reachable from the public internet.
- Review any Apple signing certificate and gaming account activity for signs of misuse.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
GBHackers