Latest / Media, elections and online safety

Check Point finds 1,608 live ARTEX AI hacking panels used by cybercriminals

See how this story connects

Check Point Research found 2,557 systems hosting or having hosted ARTEX panels, 1,608 of them live and public, and read the full database of 10 misconfigured instances. Chinese models were the most prevalent in the operator consoles, with DeepSeek Flash leading, and most attacks ran fully autonomously after the operator set the goal. One operator tasked agents with stealing Apple code-signing certificates from 10 gray-market signing shops, and the agents obtained more than 300, three of which passed validation.

Why it matters

The operators’ own consoles show criminals setting a goal and leaving ARTEX agents to find and exploit web flaws for opportunistic, financially motivated attacks with almost no further input.

When
5 Nov 2026
ID
WTA-N-2026-0786
Who
Check Point Research

Summary written with AI by wheresthe.ai, from Check Point Research. Checked against the source on 6 Nov 2026.

Source copy: saved on 6 Nov 2026 to check this story and not republished, because the text belongs to its publisher. Also held by the Internet Archive.

Next stop on this Storyline: What happened nextArctic Wolf links AntiFox AI pentest tool to intrusions that read an AWS production secret

Cite this story

WTA-N-2026-0786: “Check Point finds 1,608 live ARTEX AI hacking panels used by cybercriminals.” wheresthe.ai, 5 Nov 2026. https://wheresthe.ai/d/intl-check-point-finds-1-608-live-artex-ai-hacking-panels-us-2026-11/ (source: Check Point Research).

Spotted an error? Email [email protected].