DevelopingSafety

CrowdStrike: China-nexus VAPOR PANDA used agentic AI tool ARTEX to target 200+ organizations

CrowdStrike said Oct. 29 that VAPOR PANDA used ARTEX, an agentic framework running mainly on a DeepSeek LLM plus an unidentified commercial model, against more than 200 organizations in at least 14 countries. Activity began Oct. 17; CrowdStrike confirmed post-exploitation at nine. A human operator steered the agents at decision points.

HEAT
OUTLETS: 5
NEW IN 6H: +5
FIRST SEEN: Oct 30, 2026, 00:10 ET
LAST SIGNAL: 12m ago

Made the five · #4 on Friday, October 30, 2026

CrowdStrike: one operator steered AI agents at 200+ orgs

Primary source

CrowdStrikecrowdstrike.com/en-us/blog/vapor-panda-uses-artex-to-scale-global-campaign/

Coverage · 5 articles, oldest first

Friday, October 30, 2026

00:10
NBC News
CrowdStrike: China-linked hackers used AI tool ARTEX with a DeepSeek LLM and another model to target 200+ organizations in 11 days, compromising at least nine
00:10
CrowdStrike
crowdstrike.com/en-us/blog/vapor-panda-uses-artex-to-scale-global-campaign/
01:40
Unite.AI
unite.ai/china-nexus-vapor-panda-breached-nine-of-200-plus-targets-with-ai-agents/
03:10
Seoul Economic Daily
en.sedaily.com/finance/2026/10/30/hackers-behind-korean-bank-attacks-may-have-hit-uk-firm
05:10
Bloomberg
bloomberg.com/news/features/2026-10-30/how-ai-is-changing-ransomware-negotiations

ShareX LinkedIn Hacker News Email

← The whole wire