# Vapor Panda Deploys ARTEX AI in Automated Cyberattacks

> Vapor Panda targets over 200 global organizations using ARTEX AI and commercial large language models for automated cyberespionage.

- Published: 2026-11-03T04:37:45.000Z
- Severity: medium
- Category: Threat Intel
- Tags: Vapor Panda, ARTEX AI, BLOODALCHEMY, Zero-Day, Credential Theft
- Author: Runtime Rebel Intel
- Primary source: https://www.bleepingcomputer.com/news/security/chinese-hackers-use-artex-ai-in-automated-attacks-against-200-orgs/
- Canonical: https://runtimerebel.com/blog/vapor-panda-deploys-artex-ai-in-automated-cyberattacks

## Key points

- Vapor Panda used the ARTEX AI framework to automate cyberespionage attacks against over 200 organizations across 14 countries.
- Targets included government ministries, telecommunications providers, pharmaceutical firms, and defense entities in multiple regions.
- Defenders should audit authentication logs, monitor for unusual automated reconnaissance activity, and patch exploited zero-day flaws promptly.

## Overview of Vapor Panda's [AI](/glossary#ai)-Driven Campaign

Security researchers have uncovered a large-scale cyberespionage campaign where a China-nexus [threat actor](/glossary#threat-actor) tracked as Vapor Panda leveraged ARTEX, an open-source and later proprietary multi-agent AI [penetration testing](/glossary#penetration-testing) framework, to target more than 200 organizations across 14 countries. According to [BleepingComputer](https://www.bleepingcomputer.com/news/security/chinese-hackers-use-artex-ai-in-automated-attacks-against-200-orgs/), the operation began on October 17 and targeted government ministries, telecommunications providers, financial institutions, and pharmaceutical, semiconductor, defense, and nuclear sectors.

The threat actor successfully compromised at least nine organizations and conducted [password spraying](/glossary#password-spraying) and credential scanning against 12 other high-value targets. Confirmed victims include telecommunications providers in the United States and Belgium, government entities in Greece, the Middle East, and Latin America, and pharmaceutical firms in the United States.

## Technical Analysis of ARTEX AI Operations

In this campaign, the threat actor utilized ARTEX AI alongside commercial large language models such as DeepSeek to coordinate planning and worker agents across multiple intrusions simultaneously. Human operators issued instructions in Chinese and intervened at critical decision points. 

The AI agents performed numerous tasks autonomously, including:
- [Reconnaissance](/glossary#reconnaissance) and [vulnerability](/glossary#vulnerability) exploitation
- Deploying web shells and the BLOODALCHEMY [backdoor](/glossary#backdoor), which has been active since 2023
- Obtaining credentials and forging administrator tokens
- Reading compromised mailboxes by leveraging authentication keys from older directory exports
- Pursuing alternative attack paths when initial attempts failed

Notably, the operators instructed the AI agents to skip Windows machines protected by CrowdStrike Falcon, focusing instead on unprotected hosts. In one intrusion, the agents consumed more than 1.4 billion input tokens.

Separately, the Dutch Institute for [Vulnerability Disclosure](/glossary#vulnerability-disclosure) (DIVD) reported that it suffered an automated attack in September 2026 using ARTEX AI. The agent moved from [initial access](/glossary#initial-access) to root privileges in 12 minutes by chaining a Zammad [zero-day](/glossary#zero-day) vulnerability with a second zero-day for local [privilege escalation](/glossary#privilege-escalation), generating over 450,000 requests and 2,500 scripts during the intrusion.

## Mitigations and Defense Strategies

Defenders must adopt proactive measures to detect and counter automated AI-driven attacks:

- **[Endpoint](/glossary#endpoint) Protection:** Ensure all endpoints run modern endpoint detection and response solutions to prevent autonomous agents from easily pivoting across the network.
- **Authentication Hygiene:** Regularly rotate administrative tokens and audit directory exports to prevent attackers from reusing legacy authentication keys.
- **Zero-Day Readiness:** Maintain rapid patching cycles and monitor perimeter assets for anomalous request volumes and rapid privilege escalation attempts characteristic of automated tools.

**Related:** [39 Methods Compromise Passkey Authentication: Threat Analysis](/blog/39-methods-compromise-passkey-authentication-threat-analysis), [Browser Attacks and EDR Blind Spots: Mitigating SaaS Threats](/blog/browser-attacks-and-edr-blind-spots-mitigating-saas-threats)

---

AI-generated analysis from the primary source above; not human-reviewed before publication — verify anything operational against the original (https://runtimerebel.com/editorial). Quote with attribution and a link to the canonical URL: https://runtimerebel.com/blog/vapor-panda-deploys-artex-ai-in-automated-cyberattacks