simplysecuregroup.com • 0m
Vapor Panda Deploys ARTEX AI Framework in Global Espionage Campaign
Vapor Panda, a China-nexus targeted intrusion adversary tracked as VexatiousTemper since February 2021, deployed the Go-based ARTEX multi-agent AI penetration-testing framework in a global espionage campaign beginning October 17, 2026. Operators used DeepSeek and a second commercial LLM to autonomously generate and execute intrusion commands after human-defined target selection. The campaign targeted over 200 organizations across 14 countries, including government ministries, telecommunications, pharmaceutical, semiconductor, defense, nuclear, financial, and think-tank sectors. CrowdStrike confirmed at least nine compromises. Initial access relied on password-based intrusion activity and established Vapor Panda tradecraft.