Censys Finds 800+ Exposed Artex AI Hacking Tools Online

Censys says it found more than 800 distinct deployments of Artex, a Chinese-made autonomous AI pentesting tool, sitting on the open web without a password. TechCrunch's Zack Whittaker reports the same tool has already been linked to two of the quarter's biggest intrusions.

"Censys identified more than 800 distinct deployments of Artex that were accessible from the web without needing a password to log in," wrote the company's researcher Silas Cutler. Microsoft previously characterized Artex as "a system of AI agents that can conduct cyberattacks from reconnaissance through data exfiltration with little needed human interaction."

Released in July, Artex surfaced in September during CrowdStrike's investigation of attacks on South Korea's finance industry, where a Chinese-speaking hacker had left an "open directory" hosting the system. That instance, according to Censys, had been publicly exposed for months and held attack data extending "well beyond South Korean banks," reaching payment and gaming companies. In October, Microsoft tied Artex to the ConnectWise breach that let attackers spy on thousands of organizations using Microsoft's cloud services; defenders had "little time to detect and respond."

Artex's makers have since moved the project closed-source, selling only to paid customers. Dozens of code copies remain on public code-sharing platforms.

Cutler notes that not every exposed instance is malicious. Authorized testers use the tool too. But the software doesn't require external accessibility, and no one has explained why hundreds of consoles are facing the internet.