ARTEX Agentic Hacking Platform Drives Autonomous RCE Attacks
Check Point Research has documented widespread criminal abuse of ARTEX, a Chinese open-source agentic penetration testing platform, with over 1,800 publicly exposed instances observed conducting fully autonomous cyberattacks. Threat actors deploy fleets of LLM-coordinated agents — predominantly powered by DeepSeek Flash — to discover and exploit web vulnerabilities including RCE, with minimal human interaction beyond initial goal-setting. The findings represent a significant escalation in accessible, AI-driven offensive tooling, lowering the technical barrier for cybercrime and enabling supply chain attacks at scale.