Hundreds Of Exposed Artex AI Hacking Tools Found Open Online

More than 800 copies of an AI-powered hacking tool called Artex were found sitting open on the internet with no password required to access them, according to a blog post from cybersecurity firm Censys cited by TechCrunch. Anyone who found one of these servers could have logged in and used the tool to attack other networks.

Artex is described by researchers as an autonomous penetration testing tool, software built to automatically probe computer systems for weak spots. It has been linked to several cyberattacks since it was released publicly in July, including a breach of the Korean finance industry in September and an October attack on IT support company ConnectWise.

What Is Artex And Who Made It

Artex is open source, meaning its code is free for anyone to download and run on their own servers. TechCrunch reports the tool is Chinese-made and has become popular among hackers who cannot get access to Anthropic's or OpenAI's more advanced, restricted cybersecurity AI models.

Microsoft has described Artex as a system of AI agents capable of carrying out an attack from start to finish with almost no help from a human operator.

"From reconnaissance through data exfiltration with little needed human interaction," Microsoft said of Artex's capabilities, according to a blog post cited by TechCrunch.

That means the software can scan a target, find a way in, and pull out data largely on its own, a workflow that used to take teams of skilled hackers working by hand.

How Many Servers Were Left Open

Censys, a firm that scans the internet for exposed or vulnerable systems, says it found more than 800 distinct Artex deployments reachable from the web without a login. Silas Cutler, principal security researcher at Censys, wrote in the firm's blog post that not every exposed copy is being used maliciously; some belong to authorized security testers who simply left the door unlocked, TechCrunch reports.

What is unclear, Cutler said, is why hundreds of these systems ended up visible on the open internet at all, since Artex does not require that kind of exposure to function. The practical effect is the same regardless of intent: a hacking tool meant to be run privately becomes available to anyone who stumbles across it, including the attack data, implants, and other tools stored inside.

Where Artex Has Already Been Used In Attacks

CrowdStrike, another cybersecurity firm, has tied Artex to attacks on South Korean banks in September, attributing the activity to a Chinese-speaking hacker who ran the tool from a server left in an "open directory," according to TechCrunch. Censys says its own data shows that exposed Artex instance had been sitting unprotected for months and held attack records reaching well beyond the banking sector, touching payment processors and gaming companies as well.

Artex also turned up in the October breach of ConnectWise, an IT support company whose software gives outside technicians remote access to client computers. TechCrunch reports Chinese-linked hackers used Artex to break into customer cloud environments hosted on Microsoft's platform, spying on thousands of organizations and moving so fast that security teams struggled to keep up.

What Happens Next For Affected Organizations

For companies and IT administrators, the discovery is a reminder that a tool does not have to be stolen to cause damage. It only has to be left unlocked. Security teams that use Artex for authorized testing are being urged to check whether their own deployments require a password and whether they are reachable from the public internet at all.

What to watch:

• Whether Censys or other scanning firms publish updated counts of exposed Artex servers in the coming weeks.
• Whether Microsoft or CrowdStrike name additional victims tied to the ConnectWise or South Korean banking intrusions.
• Whether the developers behind Artex add default authentication requirements to future releases.
• Whether other open source AI hacking tools turn up with similar exposure problems, now that researchers are looking.

HTT News has reached out through the sourcing available in this report; no additional comment from Artex's developers appears in the public record at this time. For organizations running penetration testing software of any kind, security researchers' basic advice has not changed: confirm the server requires a login, confirm it is not reachable from the open internet unless it needs to be, and check regularly, since misconfigurations like these are often discovered by outsiders before the operator notices.

mindfulAI Keyboard — An iPhone keyboard that rewrites a draft in a tone you pick. Four free AI actions a day.