Over 800 unprotected Artex AI hacking tools found online
Over 800 instances of Artex, a Chinese open-source AI hacking tool, have been found exposed online without password protection. The tool has already been used in attacks on South Korean banks and U.S. IT firm ConnectWise. Security researchers warn that misconfigured instances could let outsiders launch automated cyberattacks.
Editor, Lazyfounder
30 SEC SUMMARY
- Security researchers at Censys uncovered more than 800 Artex instances left unprotected on the internet, freely accessible to anyone without a password.
- Artex, an open-source AI tool built in China, automates cyberattacks—from scanning for weaknesses to stealing data—and has already been used against South Korean banks, gaming companies, and U.S. IT firm ConnectWise.
- Most of these breaches succeeded because attackers exploited weak passwords or systems that lacked multi-factor authentication.
- Though Artex will soon restrict new versions to paid users, dozens of its code copies remain available on public code-sharing sites.
TABLE OF CONTENTS
- More than 800 Artex instances left unprotected online
- How Artex automates cyberattacks
- Exposed systems contain active attack tools
- Artex tied to breaches at banks and U.S. IT firms
- Weak passwords and missing MFA enabled most breaches
- Artex moves to paid model, but existing copies remain public
- What this means
- Key takeaways
- Sources
More than 800 Artex instances left unprotected online
Censys researchers have found more than 800 instances of Artex, a Chinese-made AI hacking tool, sitting exposed on the internet without any password protection. These unsecured deployments leave the tool’s full capabilities—from scanning networks to stealing data—open to anyone who stumbles upon them.
How Artex automates cyberattacks
Artex automates the entire attack chain. It scans systems for weaknesses, exploits them, and moves through networks to steal data—all without human input. Microsoft called it an “autonomous penetration-testing tool,” noting that it shifts from reconnaissance to data exfiltration in a single run. Because its code was open-source, Artex became a cheap alternative to paid AI models from companies like OpenAI or Anthropic.
Exposed systems contain active attack tools
Many of the exposed Artex instances contain attack tools, including implants—malware designed to infiltrate and persist inside victim networks. Silas Cutler, Principal Security Researcher at Censys, said most of these systems are not set up for malicious purposes, but their public exposure still creates risk. Researchers are puzzled by the misconfigurations; Artex does not require internet access, so leaving it exposed is a needless oversight.
Artex tied to breaches at banks and U.S. IT firms
Since its release in July, Artex has been tied to a string of cyberattacks. In September, Chinese-speaking hackers used it to breach South Korean banks. CrowdStrike later found that the same unprotected Artex instance had been harvesting attack data on payment companies and gaming firms for months.
A month later, attackers turned Artex against ConnectWise, a U.S. IT support giant. According to Microsoft, the tool let them move through cloud environments and steal data so quickly that defenders had little time to react.
Weak passwords and missing MFA enabled most breaches
Most of these attacks succeeded because basic security measures were missing. Attackers entered through weak passwords or systems that lacked multi-factor authentication. The breaches show how even sophisticated tools like Artex can turn a simple oversight into a large-scale compromise.
Artex moves to paid model, but existing copies remain public
Artex’s creators announced plans to close its source code, restricting future updates to paying customers. The change won’t erase the existing copies—dozens remain available on public code-sharing sites, where anyone can download and use them.
What this means
Lazyfounder analysis — our interpretation, not reported fact.
When defenders publish powerful tools as open-source, a single misconfiguration can hand those same capabilities to attackers.
Key takeaways
- Over 800 unprotected Artex instances give outsiders direct access to automated attack tools.
- Basic security failures—like weak passwords and missing multi-factor authentication—enabled most Artex-linked breaches.
- Once open-source code is released, it cannot be revoked; even after Artex switches to a paid model, existing copies will circulate indefinitely.
Related on Lazyfounder
Sources
- TechCrunch · 2026-11-06
Hundreds of Artex AI hacking tools found publicly exposed to the web
This story is an original summary drafted with AI by Lazyfounder from the reporting listed above and checked by automated validation. Facts are attributed to their original publishers; sections marked as analysis are Lazyfounder's. Where a source is in another language, facts were machine-translated and quotations are reported, not reproduced. Read the original coverage via the links, and see our AI policy and corrections policy.
About the author
Editor, Lazyfounder
Tarun Mottlia edits LazyFounders, covering Indian startups, funding rounds, AI and product launches. Every story on the site is AI-assisted and checked against its cited sources before publication.
More stories by Tarun MottliaGet the LazyFounder Brief
Startup, funding and AI news in a five-minute read. Join the early-access list.
