CrowdStrike: China-nexus VAPOR PANDA used the ARTEX agent framework, mainly on DeepSeek, against 200+ organizations in 11 days
Confirmed
The takeaway
A human operator steered the agents at key decision points; CrowdStrike calls it a shift “from single intrusions to multiple simultaneous engagements directed by a human operator”.
Status
- Claim
Confirmed
- Our reporting
- High confidence
- Importance
- 3 of 5
- Last verified
- 8 November 2026
Your AI and this story
- GPT-6 Astra182 days after its cutoff
- Claude Opus 5.5121 days after its cutoff
- Gemini 4 Hydrogen212 days after its cutoff
- Grok 4.7151 days after its cutoff
None of these four assistants can know about it. The closest, Claude Opus 5.5, stops 121 days before it.
Key facts
- Nov 6: Censys found 800+ ARTEX deployments reachable from the web without a password (not all malicious); ARTEX has announced it will go closed-source, but copies remain on code-sharing sites (TechCrunch)
- Censys (TechCrunch, Nov 6): more than 800 publicly exposed instances of the ARTEX AI pentesting tool found on the internet
- Actor and window (CrowdStrike OverWatch, Oct 29): VAPOR PANDA, China-nexus; activity from Oct 17, 2026 over an 11-day window
- Scale: 200+ organizations in at least 14 countries; post-exploitation confirmed at 9; password spraying and credential scanning against at least 12 more
- Models: ARTEX ran mainly on DeepSeek, ‘supplemented by a second subscription-based commercial LLM’ CrowdStrike could not identify
- Targets: foreign ministries in Latin America, Europe, Asia and the Middle East; a Middle East interior ministry; US semiconductor, defence, pharmaceutical, nuclear, financial and think-tank organizations; telecoms in several countries
- Access (high level): weaknesses in internet-facing systems and cloud and identity set-ups, plus leaked or stale credentials
- Separate from Microsoft’s Storm-0940 ARTEX activity (Oct 21, ConnectWise supply chain); CrowdStrike expects ARTEX adoption by China-nexus groups to keep growing over the next 12 months
Show 1 more
- Coverage: NBC News (Kevin Collier, Oct 29), Techmeme headline
What happened
CrowdStrike’s threat-hunting team attributed an 11-day espionage wave to VAPOR PANDA, which used ARTEX, a Chinese open-source agentic hacking framework already linked to bank breaches in South Korea and to Microsoft’s Storm-0940 report, to work many targets at once. Most of the model calls went to DeepSeek; a second, paid commercial model was also used but not identified.
Why it matters
It is the largest documented campaign so far in which one operator directs AI agents against hundreds of government and industry targets in parallel, and a sign that open-weight Chinese models are becoming standard parts of state-linked hacking tool chains.
Sources
4 sources from 3 sites. Numbers match the chips in the text.
4 sources: 1 primary, 3 press
Primary
- CrowdStrike: VAPOR PANDA uses AI-driven ARTEX in global espionage campaign (Oct 29)crowdstrike.com, official
Press
- TechCrunch: hundreds of ARTEX AI hacking tools found exposedtechcrunch.com, press
- NBC News: China-linked hackers used AI to target 200 organizations, CrowdStrike saysnbcnews.com, press
- TechCrunch: Hundreds of Artex AI hacking tools found publicly exposed to the webtechcrunch.com, press
Changes
- Censys exposure count
- Censys count of exposed ARTEX instances (news agent)
- Filed (news agent; CrowdStrike blog and NBC read)