Key facts
- Censys said it identified more than 800 distinct Artex deployments accessible from the web without a password.
- Artex is an open-source autonomous penetration testing tool released publicly in July.
- CrowdStrike attributed September attacks on the Korean finance industry to a Chinese-speaking hacker using an Artex instance.
- Microsoft said hackers used Artex in the October ConnectWise attack to break into cloud environments and steal data.
- Censys researcher Silas Cutler said not every Artex instance is operated maliciously and many are used by authorized testers.
- Artex announced it would go closed-source, limiting further releases to paid customers.
Security researchers have found hundreds of copies of a Chinese-made AI hacking tool publicly exposed to the internet, according to a TechCrunch report published November 6, 2026. The software, called Artex, is an open-source autonomous penetration testing tool, meaning software that automatically probes computer systems for weaknesses. It has been linked to several cyberattacks since its public release in July.
As open-source software, Artex is free for anyone to download and run on their own servers. That has made it a popular tool for those who cannot access Anthropic or OpenAI's most advanced cybersecurity AI models for discovering security vulnerabilities. Microsoft has previously described Artex as a system of AI agents that can conduct cyberattacks "from reconnaissance through data exfiltration with little needed human interaction."
Cybersecurity firm Censys, which scans the internet for exposed or vulnerable systems, said in a blog post that it identified more than 800 distinct deployments of Artex that were accessible from the web without needing a password to log in. Silas Cutler, principal security researcher at Censys who wrote the blog post, said not every instance of Artex is operated maliciously and many are used by authorized testers. It is unclear why hundreds of these Artex systems are exposed to the web, as the software does not require them to be accessible from the internet.
The publicly accessible systems also expose attack tools, such as implants, which are hidden malicious software used to compromise and maintain persistent access to a victim's network.
Security companies have linked Artex to several broad-scale cyberattacks, including against the Korean finance industry in September. CrowdStrike attributed the attacks to a Chinese-speaking hacker who used an Artex instance, in part because the hacker had left an open directory hosting the system. Censys said its data showed the Artex instance in question had been publicly exposed for months and appeared to contain more attack data that extended "well beyond South Korean banks," including payment and gaming companies.
Artex was also used in an attack on IT support company ConnectWise in October, which allowed Chinese-linked hackers to spy on thousands of organizations whose data and files are hosted in Microsoft's cloud. Microsoft, which has visibility into the attack, said in a blog post that the hackers used Artex to break into customers' cloud environments and steal their data at such speed that defenders had "little time to detect and respond."
Many of the attacks linked to Artex involved exploiting simple vulnerabilities, such as guessing weak or known passwords, and a lack of multi-factor authentication. Artex has since announced it would go closed-source, effectively limiting further releases for paid customers. Dozens of copies of Artex's code remain available on code-sharing sites and can still be used in active attacks.