Security researcher: 2,200 ARTEX C2 servers spotted, AI-generated C2 frameworks already in use

cyb3rops · x · 2026-10-30

Security researcher Michal Koczwara reports observing more ARTEX C2 servers than Cobalt Strike and all other C2 frameworks combined — nearly 2,200 servers running ARTEX counting only exposed default admin panels, with many more hidden or modified instances. He also says threat actors are already using new, not-publicly-detected AI-generated C2 frameworks, underscoring how AI is lowering the bar for producing attack tooling.

Original post →

More from Fun

Fun channel →