Skip to content
ARTEX.sh

ARTEX news timeline,from first commit to Google's report.

Reports in English, Korean, Chinese and Japanese, oldest at the bottom. Each one links to the outlet that published it.

27 reports, 2026-07-20 to 2026-10-30

October 202623

  1. Language: EN

    ARTEX and Friends: Enter Agentic Offensive Frameworks

    Google Threat Intelligence Group + Mandiant

    Six sub-agents; UNC7228 (overlaps Storm-0940) used ARTEX; ScopeWeaver and ARTEX PRO named as variants; PentAGI, Hexstrike, CAIRN, AgentZero also abused; detection rules listed.

  2. Language: EN

    Former pentester used ARTEX AI to steal 8.2 million data records

    BleepingComputer

    Korean police name 7 suspects behind 90+ breaches; leader (32, ex-pentester) arrested Oct 15; 8.2M records; ransoms of 360M won in 38 cases.

  3. Language: EN

    China-Aligned Hackers Used AI Tool To Target Over 2,250 Cloud Environments Worldwide

    Republic World

    2,250+ tenants targeted; Microsoft says attempts, not confirmed breaches.

  4. Language: EN

    Microsoft: Chinese State Actor Used AI to Compromise ConnectWise Tenants

    Infosecurity Magazine

    ConnectWise takes cloud services offline after Storm-0940 abuse with ARTEX.

  5. Language: EN

    Microsoft ties Storm-0940 to ARTEX-driven ConnectWise Cloud Backup compromise

    Microsoft Threat Intelligence (via The Hacker News, 2026-10-22)

    China-linked Storm-0940 used ARTEX to automate password spraying and OAuth abuse.

  6. Language: JA

    日本企業への不正アクセス、中国のAIツール「ARTEX」使用を確認

    Impress Watch

    GMO research confirms ARTEX use in attacks on Japanese firms.

  7. Language: JA

    GMO Cybersecurity by Ierae confirms ARTEX on infrastructure attacking Japanese companies

    ScanNetSecurity (dated 2026-10-21)

    One attack server targeted ~20 Japanese firms; 6 more AI attack servers found.

  8. Language: KO

    ThreatBook launches RedAgents with ARTEX Pro

    ZDNet Korea (press release, dated 2026-10-20)

    RedAgents SaaS runs several AI pentest agents; ARTEX Pro is the enterprise edition from RedAgents' product lead; says the open edition has no built-in safety controls.

  9. Language: ZH

    冠军 AI 渗透工具 ARTEX 架构拆解

    CN-SEC (repost of WeChat 知白守黑1024)

    Architecture teardown of v0.3.15 (~149k lines); notes the closure and the Korea misuse.

  10. Language: EN

    Chinese AI tool linked to Korean bank hacks halts public updates as suspect denies involvement

    Korea JoongAng Daily

    At least 9 institutions hit or targeted; Logpresso links suspect to GodNet/Vitas DDoS group; 26-year-old Guangdong suspect denies involvement.

  11. Language: EN

    Hacker used ARTEX AI and Claude agents to target South Korean banks

    BleepingComputer

    Shinhan, KB Kookmin, Hana targeted; customer and card data exposed; developer closed the source.

  12. Language: KO

    금융권 해킹 'ARTEX', 여러 AI 지휘하는 플랫폼으로 진화

    Seoul Economic Daily (서울경제)

    AhnLab: 'ARTEX v2' has a planner delegating to many worker agents and external tools; servers also host other AI hacking tools.

  13. Language: EN

    ARTEX AI Agent Goes Closed After Korea Bank Hacks

    Technology.org

    Closed-source announcement coverage.

  14. Language: EN

    China's ARTEX makes AI agent closed-source after Korean bank hack

    DealStreetAsia

    Developer ends updates and support and closes the source after the bank-hack links.

  15. Language: EN

    AI-Driven tool ARTEX used in attacks against South Korean Banks

    Security Affairs

    Recaps CrowdStrike findings and the exposed open directories.

  16. Language: EN

    ARTEX AI pentesting tool used in data theft from South Korean financial firms

    The Hacker News

    Chinese-speaking, financially motivated operator used ARTEX with LLM backends against Shinhan and others, late Sep to early Oct.

  17. Language: EN

    ARTEX goes closed-source; Autumn-27/ARTEX deleted

    GitHub / multiple outlets

    Developer ends public updates and distribution citing misuse; repo returns 404. Last open version v0.3.15 (2026-10-07). Hinln/ARTEX backup created 2026-10-08, RuoJi6/ARTEX on 2026-10-09.

  18. Language: KO

    금융권 공격한 '아르텍스', 中 AI '딥시크' 연동 기능 갖췄다

    Financial News (파이낸셜뉴스)

    ARTEX can plug into external LLMs incl. DeepSeek; ~68,000 customers and staff exposed.

  19. Language: EN

    Unknown Threat Actor Uses AI-Driven ARTEX to Target South Korean Finance

    CrowdStrike blog

    Primary source: open directories exposed Claude Code histories and ARTEX configs; ARTEX ran on DeepSeek v4.1-flash, with GLM-5.3 and Grok 4.6; actor likely Chinese-speaking, financially motivated.

  20. Language: EN

    ARTXploit: ARTEX v0.3.14 pre-auth RCE via fail-open authentication

    GitHub (therustymate)

    A public proof of concept for a login bypass in v0.3.14 that leads to remote code execution on the console. Later versions fix it.

  21. Language: EN

    AhnLab finds ARTEX on 600 IPs as police probe South Korean bank breaches

    RuntimeWire (citing Yonhap)

    AhnLab counts about 600 IPs hosting ARTEX worldwide; police probe; ~68,000 people's data; ARTEX use not yet proven.

  22. Language: EN

    Open-Source AI Agent Hacked Seven South Korean Banks, Exposing 65,000 Records

    Tech Times

    Seven financial institutions breached via secondary systems; 65,000+ customer records.

  23. Language: KO

    해킹에 악용된 AI 에이전트는 아르텍스

    Hankyung (한국경제)

    Names ARTEX as the Chinese open-source AI agent regulators link to breaches at at least six Korean banks.

September 20261

  1. Language: ZH

    ARTEX wins the first Baidu BSRC 'Agent+' attack/defense challenge (national champion)

    CN-SEC (repost of WeChat 网络安全透视镜)

    Offline final in Chengdu, run by Baidu BSRC with Kuaishou, Didi, Duxiaoman and others; 150+ teams; 50% live range + 50% jury; ARTEX first overall.

August 20261

  1. Language: ZH

    ARTEX live-range run in the Baidu Agent+ challenge

    CN-SEC (repost of WeChat 网络安全透视镜)

    Live range score 67.83/100 (7th), 5h08m18s effective time, 456,495,944 tokens.

July 20262

  1. Language: ZH

    ARTEX first commit 'chore: ARTEX 初始化' (open-source release on GitHub)

    GitHub (history preserved in Hinln/ARTEX)

    Autumn-27 publishes ARTEX, an AI autonomous pentest system (Go + Next.js), AGPL-3.0.

  2. Language: EN

    norma agent SDK repo created by Autumn-27

    GitHub

    The Apache-2.0 agent SDK that ARTEX is built on; still public.

Reported ARTEX numbersdiffer by outlet and date.

Counts grew as police and vendors published. Each figure below is what that source said on that day.

FigureReportedSourceDate
Institutions hit7 financial firmsTech Times2026-10-05
Institutions hitAt least 9 hit or targetedKorea JoongAng Daily2026-10-10
Breaches90+ by 7 suspectsBleepingComputer2026-10-26
Records exposed65,000+Tech Times2026-10-05
Records exposedAbout 68,000 peopleRuntimeWire, citing Yonhap2026-10-06
Records exposed8.2 millionBleepingComputer2026-10-26
Cloud tenants targeted2,250+, attempts not breachesRepublic World, citing Microsoft2026-10-26

Follow the ARTEX story.

New forks, releases and reports, dated and sourced.

Read the timelineHow ARTEX works
Isometric plane with glowing light columns