ARTEX agentic attack family expands after closure

ARTEX is emerging as a significant family of agentic attack tools rather than a single monolithic tool, with various companies documenting its use in real intrusions. Following its author taking it closed source, direct forks, descendants like ScopeWeaver, and backdoored copies have proliferated, sharing code and muddying attribution. The author argues that defenders should focus on patterns of agentic frameworks running real intrusions rather than overrotating on individual tools. Open article →