Widespread Exposure of AI Hacking Tools
Security researchers have discovered hundreds of copies of a Chinese-made AI hacking tool publicly exposed to the internet for anyone to access, potentially allowing outsiders to launch cyberattacks against unsuspecting targets.
The hacking software, called Artex, is an open-source autonomous penetration testing tool that automatically probes computer systems for weaknesses, and it has been linked to several cyberattacks since its public release in July. As open-source software, it is free for anyone to download and run on their own servers, making it a popular tool for those who cannot access advanced cybersecurity AI models. Microsoft has previously described Artex as a system of AI agents that can conduct cyberattacks from reconnaissance through data exfiltration with little human interaction.
In a blog post, cybersecurity firm Censys, which scans the internet for exposed or vulnerable systems, said that it identified more than 800 distinct deployments of Artex that were accessible from the web without needing a password to log in.
Silas Cutler, principal security researcher at Censys, noted that while not every instance of Artex is operated maliciously, it remains unclear why hundreds of these systems are exposed to the web, as the software does not require internet accessibility for its core functions.
Security Risks and Real-World Attacks
The findings underscore how powerful hacking tools can be misconfigured to be publicly accessible, increasing the risk of misuse. These exposed systems also reveal attack tools, such as implants used to compromise and maintain persistent access to a victim’s network.
Security companies have linked Artex to several broad-scale cyberattacks, including an incident against the Korean finance industry in September. Cybersecurity firm CrowdStrike attributed the attacks to a Chinese-speaking hacker who left an open directory hosting the system. Censys data indicated the instance had been exposed for months and contained attack data extending to payment and gaming companies.
Artex was also utilized in an attack on IT support giant ConnectWise in October, allowing hackers to spy on thousands of organizations hosted in Microsoft’s cloud. Microsoft reported that the attackers used Artex to break into cloud environments and steal data with such speed that defenders had limited time to respond.
Many attacks linked to Artex involved exploiting simple vulnerabilities, such as weak passwords and a lack of multi-factor authentication.
The findings demonstrate that simple misconfigurations can expose both the attacker and their targets to significant security risks.
Artex has announced it will transition to a closed-source model, limiting future releases. However, numerous copies of the code remain available on various platforms for potential use in active attacks.
