Hundreds of offensive ARTEX AI agents deployed across VPS providers, hitting Korean banks
IgorCarron · x · 2026-11-04
Security researcher pmisirov reports mass deployment of offensive AI agents: hundreds of ARTEX instances across multiple VPS providers, forming a potential distributed attack network. Largest clusters sit on Cogent (38.11.x.x) and ColoCrossing (172.245.x.x), with others on DigitalOcean, Vultr and Linode; some providers accept crypto payments. Identical ETag (6acfa90c-39df) and Content-Length (14815) across instances prove they all come from the same Docker image or template. Microsoft, CrowdStrike and AhnLab have confirmed ARTEX in live attacks, including against Korean financial institutions.
More from Safety
- UK AI minister warns serious cyberattack is "extremely likely" and country unprepared — Polymarket · 2026-11-04
- NIST publishes design tenets for agent identity management with crypto-verifiable identities — AccBalanced · 2026-11-04
- Three US bills in one month target AI agent liability, reaching operators under CFAA — AccBalanced · 2026-11-04
- Google: schools that block AI features will lose Search too starting 2027 — The Decoder · 2026-11-04
- UK NCSC: AI will speed up and scale existing cyber attacks, not create new ones — koltregaskes · 2026-11-04
- Anthropic says it may imminently hit RSP threshold for AI-accelerated R&D, releases provable inference work — tobyordoxford · 2026-11-04