Over 800 Copies of Artex AI Hacking Tool Found Exposed on the Open Web

Security researchers found more than 800 copies of Artex, a Chinese-made autonomous AI hacking tool, sitting on the public internet without password protection. Anyone could reach them. Anyone could use them to launch cyberattacks against unsuspecting targets.

Censys, a cybersecurity firm that scans the internet for exposed systems, reported the findings in a blog post. The company said it identified more than 800 distinct deployments of Artex that were accessible from the web without needing credentials to log in.

What is Artex and why does it matter?

Artex is an open-source autonomous penetration testing tool. That means software which automatically probes computer systems for weaknesses. It has been linked to several cyberattacks since its public release in July. Because it is free to download and run on personal servers, it has become popular among hackers who cannot access the advanced cybersecurity AI models sold by Anthropic or OpenAI for finding security vulnerabilities.

Microsoft has described Artex as a system of AI agents capable of running attacks end to end. The company said the agents can conduct cyberattacks "from reconnaissance through data exfiltration with little needed human interaction."

Silas Cutler, principal security researcher at Censys and author of the blog post, said not every Artex instance is operated maliciously. Many belong to authorized testers. But nobody knows why hundreds of these systems face the open web, because the software does not require internet access to function.

What does the exposure reveal?

The findings show how easily even powerful hacking tools get misconfigured into public view, raising the odds that someone finds them and misuses them. The exposed systems also leak attack tools, including implants — hidden malicious software used to compromise a victim's network and keep persistent access to it.

Artex already has a track record in large-scale operations. Security companies linked its use to broad attacks against the Korean finance industry in September. CrowdStrike attributed those attacks to a Chinese-speaking hacker who ran an Artex instance, in part because the hacker had left an "open directory" hosting the system. Censys said its data showed that same instance had been publicly exposed for months and appeared to hold attack data extending "well beyond South Korean banks," including payment and gaming companies.

In October, Artex was used in an attack on IT support giant ConnectWise. The breach allowed Chinese-linked hackers to spy on thousands of organizations whose data and files are hosted in Microsoft's cloud. Microsoft, which had visibility into the attack, said the hackers used Artex to break into customers' cloud environments and steal data so fast that defenders had "little time to detect and respond."

Many Artex-linked attacks relied on exploiting simple vulnerabilities: guessing weak or known passwords and exploiting a lack of multi-factor authentication. The Censys findings add a twist to that pattern. Simple misconfigurations can expose both the attacker and their targets.

What happens next?

Artex has announced it will go closed-source, effectively limiting further releases to paid customers. The move will not scrub the internet clean. Dozens of copies of Artex's code remain available on code-sharing sites, and they can still be used in active attacks. Until the exposed deployments come offline, the window for misuse stays open.