Chinese hackers use ARTEX AI in automated attacks against 200 orgs

Chinese threat actors deployed ARTEX, an open-source multi-agent AI penetration-testing framework, in automated attacks targeting over 200 organizations across 14 countries. The use of AI-driven tooling marks a significant escalation in the sophistication and scale of state-sponsored cyberattacks. ARTEX enables automated reconnaissance, exploitation, and lateral movement, reducing the need for manual intervention. The breadth of the campaign — spanning 14 countries — suggests a broad targeting strategy potentially aimed at intelligence gathering or pre-positioning. The use of open-source AI frameworks lowers the barrier for advanced attack automation. This incident highlights the growing threat of AI-augmented offensive cyber operations by nation-state actors.