Security researchers have discovered hundreds of copies of a Chinese-developed AI hacking tool publicly accessible on the internet, potentially enabling outsiders to initiate cyberattacks against unsuspecting targets.
The hacking software, known as Artex, is an open-source autonomous penetration testing tool designed to automatically probe computer systems for weaknesses. Since its public release in July, it has been linked to several cyberattacks. As open-source software, it is freely downloadable and runnable on personal servers, making it a popular choice for users who cannot access advanced cybersecurity AI models from Anthropic or OpenAI. Microsoft has previously characterized Artex as a system of AI agents capable of conducting cyberattacks ranging from reconnaissance to data exfiltration with minimal human intervention.
In a blog post, the cybersecurity firm Censys, which scans the internet for exposed or vulnerable systems, reported identifying over 800 distinct deployments of Artex that were accessible from the web without requiring a password for login.
Silas Cutler, principal security researcher at Censys and author of the blog post, noted that not every instance of Artex is operated maliciously and that many are used by authorized testers. However, it remains unclear why hundreds of these Artex systems are exposed to the web, as the software functionality does not mandate internet accessibility.
These findings highlight the danger of powerful hacking tools being misconfigured to allow public access, thereby increasing the likelihood of misuse. The publicly accessible systems also expose attack utilities, such as implants used to compromise and maintain persistent access to a victim's network.
Security companies have connected the use of Artex to several large-scale cyberattacks, notably against the Korean finance industry in September. Cybersecurity giant CrowdStrike attributed these attacks to a Chinese-speaking hacker who utilized an Artex instance, partly due to the hacker leaving an "open directory" hosting the system. Censys reported that its data indicated this specific Artex instance had been publicly exposed for months and appeared to contain attack data extending "well beyond South Korean banks," including payment and gaming companies.
Artex was also employed in an attack on IT support giant ConnectWise earlier in October, allowing Chinese-linked hackers to spy on thousands of organizations hosting their data and files on Microsoft’s cloud. Microsoft, which monitored the attack, stated in a blog post that hackers used Artex to breach customer cloud environments and steal data with such speed that defenders had "little time to detect and respond."
Many attacks involving Artex utilized simple vulnerabilities, such as guessing weak or known passwords and a lack of multi-factor authentication.
The results demonstrate that simple vulnerabilities, including misconfigurations, can compromise both attackers and their targets.
In response to the exposure, Artex has announced it will transition to closed-source, effectively limiting further releases to paid customers. Nevertheless, dozens of copies of Artex's code remain available on code-sharing sites and can still be utilized in active attacks.
The Editorial Staff at AIChief is a team of professional content writers with extensive experience in AI and marketing. Founded in 2025, AIChief has quickly grown into the largest free AI resource hub in the industry.