Check Point: ARTEX Agentic Hacking Platforms Show Fully Autonomous Cybercrime Is Already Here
cyb3rops · x · 2026-11-06
Check Point Research's report "Hacking on Autopilot" documents large-scale abuse of ARTEX, an open-source agentic hacking platform.
- Researchers tracked 2,000+ ARTEX servers, found 1,800+ publicly exposed instances, and obtained operator console databases with full conversation logs.
- The logs show attacks were almost fully autonomous after the initial goal was set — operators barely interacted beyond checking progress.
- Chinese models dominated observed activity, with DeepSeek Flash the most used.
- All goals were opportunistic, financially motivated cybercrime at scale; agents exploited web vulnerabilities like RCE, and in some cases actively carried out supply chain attacks with the access gained.
Conclusion: fully autonomous AI-driven cybercrime is no longer theoretical.
More from Safety
- AI uncovers 10-year-old bug where any text over 256 chars works as a valid root password — andersonbcdefg · 2026-11-06
- Anthropic chief architect Sam McCandlish's first post hints at internal-acceleration report, possibly hitting 2x RSP threshold — inductionheads · 2026-11-06
- Claude Code bug leaks user email via User-Agent header, victim reports dozens of scam emails daily — niloofar_mire · 2026-11-06
- Gary Marcus blasts Anthropic cofounder's AI-safety defense of METR report redactions — GaryMarcus · 2026-11-06
- Anthropic cofounder defends METR report redactions; Gary Marcus unimpressed — GaryMarcus · 2026-11-06
- AI-powered login attacks hit 11-year-old podcast site: 30% of all attempts in one day — NathanpmYoung · 2026-11-06