Censys finds 800+ exposed deployments of Artex AI hacking tool
Security researchers have found hundreds of copies of Artex, a Chinese-made AI hacking tool, publicly exposed to the internet where anyone can reach them. That could let outsiders launch cyberattacks against unsuspecting targets.
Artex is an open source autonomous penetration testing tool: software that automatically probes computer systems for weaknesses. It was released publicly in July and has since been linked to several cyberattacks. Because it is open source, it is free to download and run on your own servers, which makes it popular with people who cannot get access to Anthropic's or OpenAI's most advanced cybersecurity AI models for finding vulnerabilities. Microsoft has previously described Artex as a system of AI agents that can carry out attacks "from reconnaissance through data exfiltration with little needed human interaction."
The exposure was documented in a blog post by Censys, a cybersecurity firm that scans the internet for exposed or vulnerable systems. Censys said it identified more than 800 distinct Artex deployments that were accessible from the web without needing a password to log in. The post was written by Silas Cutler, principal security researcher at Censys. He said not every Artex instance is operated maliciously and that many are used by authorized testers. Still, it is unclear why hundreds of these systems are on the open web, since the software does not require internet accessibility. The publicly reachable systems also expose attack tools, such as implants (hidden malicious software used to compromise a victim's network and keep persistent access to it).
Security companies have tied Artex to several broad-scale attacks. One was against the Korean finance industry in September. CrowdStrike attributed those attacks to a Chinese-speaking hacker who used an Artex instance, partly because the hacker had left an "open directory" hosting the system. Censys said its data showed that instance had been publicly exposed for months and appeared to hold more attack data extending "well beyond South Korean banks," including payment and gaming companies.
Artex was also used in an attack on IT support company ConnectWise earlier in October. That let Chinese-linked hackers spy on thousands of organizations whose data and files are hosted in Microsoft's cloud. Microsoft, which has visibility into the attack, said in a blog post that the hackers used Artex to break into customers' cloud environments and steal their data so fast that defenders had "little time to detect and respond."
Many of the Artex-linked attacks relied on simple weaknesses: guessing weak or known passwords, and a lack of multi-factor authentication. The report's reading is that simple vulnerabilities, including misconfigurations, can expose both the attacker and their targets.
Artex has since announced it will go closed-source, effectively limiting further releases to paid customers. Dozens of copies of its code remain available on code-sharing sites and can still be used in active attacks.
Key facts
- Censys identified more than 800 distinct Artex deployments reachable from the web without a password.
- Artex is a Chinese-made open source autonomous penetration testing tool, released publicly in July and linked to several cyberattacks.
- CrowdStrike tied September attacks on the Korean finance industry to a Chinese-speaking hacker who used an Artex instance left in an open directory; Censys says it was exposed for months and held data on payment and gaming companies too.
- Artex was also used in the ConnectWise attack earlier in October, which let Chinese-linked hackers spy on thousands of organizations hosted in Microsoft's cloud.
- Artex has announced it will go closed-source, but dozens of copies of its code remain on code-sharing sites.
Why it matters
Artex automates the work of probing systems for weaknesses, and Microsoft has described it as able to run attacks from reconnaissance through data exfiltration with little needed human interaction. It is free and open source, so people locked out of Anthropic's and OpenAI's most advanced cybersecurity models can still use it. Now more than 800 deployments sit on the open web with no password, and they also expose attack tools such as implants. That raises the chance that someone other than the original operator finds and misuses them.
Who it affects
Organizations on the receiving end of Artex-linked attacks are the clearest group: Korean finance firms hit in September, payment and gaming companies that appear in the exposed attack data, and the thousands of organizations whose data in Microsoft's cloud was reachable through the ConnectWise attack. Authorized testers who run Artex are affected too, since Cutler notes that many instances are legitimate.
How to use it
The source gives no usage guide for Artex. Its one practical thread is about defence: many Artex-linked attacks succeeded by guessing weak or known passwords and by exploiting a missing multi-factor authentication requirement. Those are the gaps the attacks went through. For anyone running Artex legitimately, the source notes the software does not need to be reachable from the internet.
How solid is it
The core finding comes from Censys, a firm that scans the internet for exposed systems, in a blog post by principal security researcher Silas Cutler. The attribution of the Korean attacks comes from CrowdStrike, and the ConnectWise account from Microsoft's own blog post. The 800+ figure refers to deployments reachable without a password, as Censys counted them. The source does not say how many of them are malicious versus authorized.
Risks and caveats
Exposure is not the same as malicious use: Cutler says many instances are run by authorized testers. The source does not explain why the deployments are exposed. Artex's move to closed source limits further releases for paid customers, but dozens of copies of the code remain on code-sharing sites and can still be used in active attacks. The source does not say whether the exposed instances have been taken offline or secured.
“from reconnaissance through data exfiltration with little needed human interaction”
— Microsoft, describing Artex as a system of AI agents