ARTEX

The AI autonomous penetration testing tool 'ARTEX', released by a Chinese-speaking developer, has been confirmed to be abused globally, including in attacks on approximately 20 Japanese companies. Although the author stopped publication, modified versions are proliferating.

• •It is an AI autonomous penetration testing tool called 'ARTEX' released by a Chinese-speaking developer for 'learning and research purposes'.
• •Microsoft and CrowdStrike reported abuse cases, and it was used in attacks on about 20 Japanese companies.
• •The author stopped publishing the tool, but modified versions are currently proliferating.

Microsoft warns that China-linked threat actors are using open-source AI tools to automate attacks against hundreds of organizations globally.

• •Microsoft announced that China-linked attackers known as "Storm-0940" are using the open-source AI penetration testing tool "ARTEX" to automate attacks.
• •The group is targeting hundreds of organizations worldwide and has been analyzed as being involved in intrusions into customers' Microsoft 365 via ConnectWise.
• •Microsoft is calling for caution, noting that in some cases, attackers have managed to seize administrator privileges in less than three hours.

GMO Cybersecurity investigated unauthorized access targeting about 20 Japanese companies and confirmed the use of the autonomous penetration testing tool 'ARTEX'.

• •GMO Cybersecurity by Yellae investigated the source of unauthorized access targeting Japanese companies
• •The investigation confirmed the use of the autonomous penetration testing tool 'ARTEX'
• •Approximately 20 Japanese companies are reported to be targets

GMO Cyber Security by Yellae confirmed on October 19 that attackers are abusing the AI-powered penetration testing tool 'ARTEX' in unauthorized access incidents targeting Japanese companies.

• •GMO Cyber Security by Yellae announced on October 19 that it confirmed the abuse of the AI penetration testing tool 'ARTEX'.
• •The company confirmed that many of the sources of recent unauthorized access incidents are AI-driven.
• •The attacks targeted Japanese companies.