Threat actor · 1 source · latest 58m

Storm-3358 uses the ARTEX agentic AI framework to target financial organisations

THREAT ACTORMicrosoftredteam/daily · 1 source

Severity: High
Sources: 1

What happened

Microsoft reports that the financially motivated actor Storm-3358 began targeting financial organisations in October 2026 using the agentic AI framework ARTEX, mainly in Southeast Asia. ARTEX is combined with conventional tools to exploit flaws such as anonymous file upload and SSRF, and to deploy WISP, vshell and AdaptixC2 remote access trojans for persistence and lateral movement. Microsoft advises watching for bursts of rapid, varied requests and default penetration-testing tool signatures, and using honeypots and tarpits to divert attacks.

For IT people · Written by AI from 1 source · Wrong?

What to do

Review sign-in risk detections and configure Conditional Access policies to require multifactor authentication or block access based on risk.
Apply the indicators of compromise published by Microsoft to your detection tooling and review related endpoint alerts.
Hunt for rapid, high-volume requests and default penetration-testing tool user agents in web and sign-in traffic.
Consider deploying honeypots, decoys or tarpits to draw autonomous attacks away from real systems.

Written by AI from the sources, checked against them

Read the full story at the source