Chinese Hackers Use AI-Powered ARTEX to Target Over 200 Organizations Worldwide

Key points

• CrowdStrike attributes the activity to a China-based targeted intrusion adversary it tracks as Vapor Panda (previously VexatiousTemper).
• The attackers use ARTEX, a Go-based penetration testing framework powered by artificial intelligence.
• The campaign has hit more than 200 organizations worldwide, with high-value targets attacked simultaneously.

Chinese state-sponsored threat actors have been observed using ARTEX, a Go-based, AI-powered penetration testing framework, in attacks aimed at high-value targets simultaneously. CrowdStrike attributes the activity to a China-based targeted intrusion adversary it tracks as Vapor Panda, previously known as VexatiousTemper.

Details

ARTEX is written in Go and works as a penetration testing framework that uses artificial intelligence. CrowdStrike’s reporting links the framework to attacks on more than 200 organizations worldwide, with several high-value targets hit at the same time.

The actor behind the campaign, Vapor Panda, was previously tracked as VexatiousTemper.

Why it matters

The campaign shows artificial intelligence embedded in offensive tooling used by state-sponsored actors. It also struck multiple high-value targets at the same time.