ARTEX abuse expands as cybercriminals target financial sector

In October 2026, the Cambodia-based threat actor Storm-3358 began using the agentic AI offensive framework ARTEX to target financial organizations mainly in Southeast Asia and some global institutions. The group combines ARTEX with automated tools to scan systems, exploit vulnerabilities such as anonymous file upload and server-side request forgery, and deploy open-source remote access trojans including WISP, vshell, and AdaptixC2. ARTEX agents automate credential compromise, web shell deployment, lateral movement, privilege escalation, and data exfiltration at machine speed. This reflects a trend of threat actors accelerating attack chains using AI-powered penetration testing frameworks.

• ARTEX: Agentic AsbestosMalware2026-11-06
• Unknown Threat Actor Uses AI-Driven ARTEX to Target South Korean FinanceCampaign2026-10-09
• ARTEX Exposed: Infrastructure Behind the South Korea Bank HackMalware2026-11-04
• BOSSAI: Inside the AI attack mesh that targeted Taiwan's emergency servicesCampaign2026-11-04
• VAPOR PANDA Uses AI-Driven ARTEX to Grow Global Espionage CampaignMalware2026-10-31