Storm-3358 uses the ARTEX agentic AI framework to target financial organisations
THREAT ACTORMicrosoftredteam/daily · 1 source
- Severity
- High
- Sources
- 1
What happened
A criminal group based in Cambodia is using an AI-driven hacking tool called ARTEX to attack banks and other financial organisations, mostly in Southeast Asia. The tool scans internet-facing systems, exploits weaknesses and installs remote access programs so attackers can stay inside networks. Microsoft says defenders can respond faster by using AI and decoy systems.
Like I’m new · Written by AI from 1 source · Wrong?
What to do
- Review sign-in risk detections and configure Conditional Access policies to require multifactor authentication or block access based on risk.
- Apply the indicators of compromise published by Microsoft to your detection tooling and review related endpoint alerts.
- Hunt for rapid, high-volume requests and default penetration-testing tool user agents in web and sign-in traffic.
- Consider deploying honeypots, decoys or tarpits to draw autonomous attacks away from real systems.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
Microsoft Security Blog
Who and what is in it
Companies