ARTEX overlaps with self-hosted AI gateway infrastructure
On November 5, Censys reported ARTEX-related infrastructure beyond the campaigns previously identified, with many observed hosts also running self-hosted large language model (LLM) gateway or reseller software.
ARTEX is an open-source, AI-driven penetration-testing framework that can connect AI agents to language models. The host overlap shows that ARTEX-related systems and model-access services share infrastructure; it does not show that those services powered attacks.
For financial and cryptocurrency defenders tracking ARTEX, a framework-only view may miss adjacent model-access services or forks on the same infrastructure. Censys’s findings do not establish that those services took part in attacks, so their role in the broader activity remains uncertain.
ARTEX Offensive AI Tool Activity Far Exceeds Reported Campaigns
A new Censys report showed that the use of ARTEX, an AI pentesting tool popular with threat actor, could be spreading far beyond initially reported campaigns