More than 800 deployments of Artex, a Chinese-made AI hacking tool, are publicly exposed to the internet without password protection, according to cybersecurity firm Censys. The exposure allows unauthorized access to software capable of launching cyberattacks against unsuspecting targets.
Artex operates as an open source autonomous penetration testing tool that automatically probes computer systems for weaknesses. Microsoft has described it as a system of AI agents designed to conduct cyberattacks from reconnaissance through data exfiltration with minimal human interaction.
Its open source nature means Artex is free to download and deploy on any server. This accessibility has made it attractive to individuals and groups unable to access more advanced cybersecurity AI models from companies like Anthropic or OpenAI.
Censys identified more than 800 Artex instances, each accessible from the web without requiring authentication. Silas Cutler, principal security researcher at Censys, said not all instances are operated maliciously — many are used by authorized testers. "It remains unclear why hundreds of these systems are exposed," he said, "as the software does not require internet accessibility."
The misconfiguration creates a two-layered risk: attackers gain direct access to the penetration testing tool itself, plus any attack implants stored within it — hidden malicious software designed to compromise networks and maintain persistent access to victim systems.
CrowdStrike attributed a September campaign against Korean financial institutions to a Chinese-speaking attacker who left an open directory hosting an Artex instance. Censys' data showed that specific instance had been publicly exposed for months and contained attack data beyond South Korean banks, including information on payment and gaming companies.
Artex also appeared in an October breach of ConnectWise, an IT support platform serving thousands of organizations. Chinese-linked hackers used the tool to infiltrate customer environments hosted in Microsoft's cloud infrastructure. The tool's speed allowed attackers to exfiltrate data faster than defenders could react.
The exposure of Artex instances reflects a broader vulnerability in cloud architecture: the proliferation of powerful attack tools combined with routine misconfiguration creates an expanding attack surface for enterprises outsourcing IT support and infrastructure.
