CrowdStrike says a group used the ARTEX agent framework and DeepSeek to target 200+ organizations in 11 days
CrowdStrike says a group it tracks as VAPOR PANDA, which it links to China, used the open-source ARTEX agent framework against 200+ organizations in 14+ countries in 11 days, confirming access at nine. CrowdStrike says ARTEX ran mainly on DeepSeek plus an unidentified commercial model, used about 1.4 billion input tokens in one intrusion, and a person steered key steps. DeepSeek has not responded.
Why it matters
CrowdStrike says it had mostly seen AI agents assist single intrusions; here one operator ran many in parallel with an open-source framework and publicly available models.
Sources2
Written by dalao.ai: the title, summary and why it matters are our own words. The original reports are the record; their publishers keep authorship.