ARTEXなどのAI攻撃ツール、恐喝グループもスパイ集団も実際に悪用

"Since late August 2026, we have observed threat actors actively operating popular open-source multi-agent pentesting platforms like ARTEX, PentAGI, CAIRN and other potentially custom harnesses within Mandiant incident response engagements" ／ "GTIG and Mandiant have observed multiple threat actors abusing the open-source, agentic pentesting frameworks ARTEX, Hexstrike and CAIRN in incident response engagements" ／ "While the mechanics of the intrusions remain the same, such as using compromised credentials and targeting unpatched systems, the speed and scale at which frameworks can exploit these known weaknesses introduces a new defensive challenge." — 「Observations in the Wild」と「Introduction」より

"ARTEX abstracts the attack lifecycle across six specialized sub-agents." ／ "Although the original repository was taken down by its creator in October 2026 due to widespread threat actor abuse, the framework continues to proliferate globally via community forks" ／ "Their operations collectively impacted organizations across government, technology, chemicals and materials, and manufacturing sectors in the US, alongside public reporting of ARTEX targeting the financial sector in Asia." — 「ARTEX Framework」より

"For example, the Wiz Research team has been tracking a campaign associated with ARTEX, which GTIG tracks as UNC7228, that overlaps with activity tracked by Microsoft as the PRC-nexus actor STORM-0940." ／ "This includes financially motivated threat actors who used the framework to facilitate data theft extortion, and additional suspected PRC-nexus clusters." — 「ARTEX Framework」より

"individual ARTEX execution sequences ran in compressed bursts of roughly 2 to 25 seconds." ／ "However, this process generated 240 log events and exhibited errors potentially caused by multiple sub-agents overwriting one another while pursuing the same objective." — 「ARTEX Framework」より

"In at least one operation, we observed 27 events in 23 seconds of active burst time, performing rapid probing of AWS permissions across different security groups." ／ "typically moving from their first compromised account to deep system access in around four hours and in one case as rapidly as 15 minutes." ／ "Enumerated over 110,000 Active Directory objects from a domain controller and retrieved the Domain Admins group." — 「ARTEX Framework」と攻撃工程の表より

"Rather than executing complex malware, ARTEX weaponized built-in application features." ／ "It forced an application's notification system to broadcast test emails to over 1,300 internal users, turning a trusted notification channel into a mass-internal messaging tool." ／ "ARTEX was seen using similar incremental numeric markers within dropped file names, created account names, their passwords and within email subjects." — 攻撃工程の表と「ARTEX Framework」より

"Frameworks such as ARTEX compress attack timelines to machine speed; however, they currently trade stealth for velocity." ／ "Consequently, GTIG assesses with high confidence that cyber crime threat actors will continue incorporating autonomous offensive tools into their operations, given that the increased reach of their campaigns will likely compensate for any decreases in success rates." — 「Outlook」より

"It is designed so that the user only needs to describe a target and a goal, which enables entry-level users to run complex cyber security campaigns." ／ "However, analysis of operational artifacts indicates that some operations progressed to active intrusions and persistence across multiple organizations." — 「PentAGI Offensive Framework」より

"Timeframe: Near-term (1 - 3 months)" ／ "Timeframe: Medium-term (3 - 6 months)" ／ "Additionally, detection and disruption/response are two different functions–simply detecting the attack in time does little to hinder objective completion." — 「Evolution of Autonomous Offensive Frameworks」と「Outlook」より

"Many of these controls are already familiar to defenders. The difference is that automated tooling can now identify and exploit the gaps between them far more quickly." — 「Defending Against AI-Enabled Attacks: Five Layers of Defense」より

"CairnやCyberStrikeAI、ARTEXなどのAIを用いたペネトレーションテスト基盤を悪用した攻撃試行が確認されています。" ／ "主にインターネットに公開されたWebアプリケーションを標的にさまざまな脆弱性を探索して悪用を試行したり" ／ "業務上必要のないサービスや機能（管理機能など）がインターネットに公開されている場合、公開を停止する" ／ "既知の脆弱性の影響を受けるバージョンで運用している場合は、修正済みのアップデートを適用する" ／ "これまでに攻撃を受けたかを確認するために下記IPアドレスからアクセスがあったかを調査ください。" — 「ケースE：AIを用いたペネトレーションテスト基盤を悪用した攻撃試行」と「III. 対策」より

"APIへのアクセスには単位時間あたりのリクエスト件数を制限し、短時間に繰り返されるアクセスや大量実行を防止する" ／ "ログイン、パスワードリセット、SMS送信、検索処理などの負荷や悪用のリスクが高い機能には個別にレート制限や利用回数制限を設定する" ／ "API利用者やAPIトークンには必要最小限の権限のみを付与する" ／ "APIトークンには適切な有効期限を設定し、長期間有効なトークンの使用を避ける" — 「III. 対策」より