CrowdStrike reportedly attributed an ARTEX campaign to VAPOR PANDA, which the company assessed as China-linked. The operation reportedly began October 17, 2026, and targeted more than 200 organizations in at least 14 countries over 11 days. CrowdStrike said it confirmed post-exploitation activity at nine organizations.
At least 12 additional organizations reportedly faced password spraying or credential scanning. Those figures describe different stages of activity, not one combined count of confirmed compromises.
What the campaign figures count
More than 200 organizations were reportedly targeted across at least 14 countries. The nine organizations with confirmed post-exploitation activity are a separate, smaller group. CrowdStrike also reported password-spraying or credential-scanning activity at at least 12 additional organizations.
One operation targeted 19 U.S.-based organizations in the pharmaceutical, semiconductor, defense, nuclear, and financial sectors. That figure describes targets, not confirmed post-exploitation cases.
DeepSeek was used through ARTEX with human supervision
ARTEX reportedly coordinated a main agent with planning and worker agents that shared information, findings, and objectives. DeepSeek was identified as the primary model, alongside an unidentified commercial subscription model. Recovered transcripts reportedly showed a human operator giving instructions in Chinese and intervening at key decision points. The operation was described as human-supervised.
Planning agents reportedly processed about 1.4 billion input tokens in one intrusion. That figure applies to that intrusion.
For context on separate activity, NeoTeo previously covered four other groups using AI agents in cyberattacks. That article concerns different campaigns.
ARTEX and BLOODALCHEMY had earlier public histories
ARTEX is described as an open-source agentic AI framework. CrowdStrike reportedly identified BLOODALCHEMY, a backdoor publicly documented in October 2023, at two organizations during the campaign. CrowdStrike also reportedly identified campaign-associated infrastructure indicators that had not appeared in earlier public coverage of ARTEX.
CrowdStrike's reported defensive recommendations
CrowdStrike's reported recommendations included rotating exposed signing keys, pre-authentication keys, and service credentials, including credentials in older backups or directory exports. It also recommended enforcing SAML signature validation, requiring IMDSv2, limiting cloud command-execution permissions to the instances that need them, patching internet-facing systems, and maintaining endpoint detection and response coverage across the environment.
