Chinese Hackers Use AI-Powered ARTEX to Target Over 200 Organizations Worldwide
thehackernews.com Oct 31, 2026

Chinese Hackers Use AI-Powered ARTEX to Target Over 200 Organizations Worldwide

AI-summarised brief · reviewed before publication

Chinese actors identified as Vapor Panda have deployed an ARTEX to compromise more than 200 organizations worldwide since October 17, 2026. The tool integrates DeepSeek and a model, orchestrating planner and worker agents that autonomously conduct reconnaissance, vulnerability discovery and lateral movement across web applications, cloud services, containers, Active Directory and VPN critical infrastructure. CrowdStrike confirmed post‑exploitation at nine victims, where the group installed the BLOODALCHEMY malware, a ShadowPad variant, and carried out credential‑spraying and network scanning. Human operators intervene only to direct agents to create web shells, harvest domain‑admin passwords and evade endpoint defenses. The global campaign targets foreign government ministries, semiconductor firms, defense contractors, think tanks and telecom providers across Latin America, Europe, Asia, the Middle East and the United States.

💡 Why It Matters

  • · By automating multi‑vector attacks with AI, a single adversary can breach dozens of high‑value targets simultaneously, reshaping the scale and speed of state‑backed cyber espionage.