ARTEX agentic AI framework weaponized by Storm-0940

Sophos X-Ops is tracking ARTEX, an open-source, multi-agent AI penetration testing framework that threat actors have weaponized for intrusions since July 2026. Prominent campaigns include the ConnectWise Cloud Backup compromise attributed to the China-state-aligned group Storm-0940. While attack methodologies remain consistent with traditional tactics, the integration of agentic AI significantly increases their scale, persistence, and execution speed. Open article →