Home / Technology / Chinese AI Hacking Tool Exposed Online
Chinese AI Hacking Tool Exposed Online
7 Nov
Summary
- Hundreds of AI hacking tools found publicly exposed on the internet.
- Artex, an AI penetration testing tool, is linked to several cyberattacks.
- Misconfigured systems increase the risk of misuse of powerful hacking tools.
Hundreds of Artex, an AI-driven hacking tool developed in China, have been found exposed and accessible on the internet, according to security researchers. This open-source software, designed for autonomous penetration testing, has been implicated in several cyberattacks since its public release in July.
Censys, a cybersecurity firm, identified over 800 Artex deployments accessible online without any password protection. While not all instances are malicious, their public exposure raises concerns about potential misuse. This oversight can leave attack tools, such as hidden implants, vulnerable to exploitation.
Artex has been linked to significant cyber incidents, including attacks on South Korea's finance industry in September and an October breach of IT support giant ConnectWise. These attacks exploited basic vulnerabilities like weak passwords and a lack of multi-factor authentication.
Artex has since transitioned to a closed-source model, but its code remains available on sharing sites. The broad accessibility of such potent tools, even when misconfigured, underscores the evolving landscape of cyber threats and the persistent risks posed by exposed systems.
