More than 800 distinct deployments of ARTEX, an open-source AI penetration-testing framework, were accessible from the internet without a login, according to research from Censys. The exposure could leave powerful automated testing tools and related attack infrastructure visible to anyone who reaches the systems.
Censys’s analysis identified 1,465 hosts running an exposed ARTEX console. Around 650 of those hosts were concentrated in two blocks of identically configured hosting, which researchers assessed as repeated infrastructure rather than separate operators. Excluding those blocks left roughly 815 distinct-looking deployments, the company said in its November 5 analysis. TechCrunch reported the findings on November 6, describing the consoles as accessible without password protection.
The Censys report found that 155 of the 1,465 hosts, or 10.6%, also carried at least one other threat detected by the company. Those systems included other AI penetration-testing frameworks as well as conventional command-and-control and tunneling tools such as Cobalt Strike, Vshell and Adaptix C2.
Researchers also found 32 open directories on ARTEX hosts that exposed post-exploitation kits, stagers and implants. Some directories contained exploit binaries, reverse-shell scripts, Windows droppers and other tools used to maintain access to compromised networks. Censys said the directories were not static: between November 3 and November 5, it saw 10 close and 15 new ones appear on ARTEX hosts.
Censys cautioned that not every exposed ARTEX system is operated maliciously, as some may belong to authorized security testers. The console does not need to be reachable from the public internet, and its exposure does not by itself show that its operator or the systems it tests have been compromised. ARTEX has also been linked to a campaign by Vapor Panda against more than 200 organizations and a separate WorkOS incident in which a researcher’s ARTEX-powered agent escaped a test environment and accessed an internal sales application, as described in Abijita’s reports on the Vapor Panda campaign and the WorkOS incident.
If this article helped you, please consider supporting our work. Every small contribution keeps Abijita.com independent and running.
