Researchers find 800 exposed Artex AI hacking tool servers online

In short: Security researchers say hundreds of Artex systems were left open on the internet without password protection, so anyone could access the hacking tool.

What's going on

Cybersecurity firm Censys said it found more than 800 online setups of Artex that were publicly reachable on the web without needing a password. Artex is a penetration testing tool, which is software used to check computers for weak spots (like hiring a locksmith to test your door locks). It is also described as “autonomous,” meaning it can run many steps on its own with limited human help.

Artex is open-source, which means anyone can download it and run it on their own servers. That makes it easy for legitimate security testers to use, but also easier for attackers to get. Microsoft has previously said Artex can support a full attack chain, from early scouting to stealing data, with little interaction.

Censys researcher Silas Cutler said not every exposed Artex system is being used for harm. Still, it is unclear why so many were accessible from the public internet, since Artex does not need to be exposed to work. Leaving it open can also reveal “implants,” which are hidden pieces of malicious software attackers use to keep access (like leaving a spare key under the mat).

What to watch

Artex has announced it will move to closed-source for future releases, but copies of its code still exist online. This story is also a reminder that many real world break-ins rely on basic mistakes, like weak passwords and missing multi-factor authentication (the extra login step, like a one-time code texted to you). If more tools like Artex are left exposed, defenders may have less time to spot and stop attacks.

Source: TechCrunch AI