Skip to main content
MalwarePublished

ARTEX: Agentic Asbestos

Source AlienVault OTX General

0

Description

ARTEX is an open-source autonomous penetration testing framework released in July 2026 that uses large language model (LLM) driven AI agents to automate reconnaissance, exploitation, and data exfiltration with minimal human intervention. As of November 2026, over 1,400 exposed ARTEX consoles are active globally. The framework has been linked to attacks on South Korean financial institutions and a supply chain compromise involving ConnectWise. Operators often expose directories containing exploit binaries and post-exploitation tools. The developer removed the repository after public attribution, but archived copies remain in circulation.

Indicators of compromise

IP addresses 23

  • 45.87.53.6
  • 38.244.50.120
  • 124.155.252.63
  • 23.248.249.90
  • 23.158.220.98
  • 103.248.148.84
  • 203.160.133.172
  • 209.209.85.38
  • 108.165.147.226
  • 45.87.53.10

CVEs 1

  • CVE-2021-3156

Community reviews

Loading reviews…