Multiple reports say a China-linked threat group is using AI-powered penetration-testing tools to carry out rapid, large-scale intrusions. CyberScoop reports that CrowdStrike attributes the activity to “Vapor Panda” and says the group compromised 140 sensitive targets in 11 days, with the wider campaign affecting at least 200 organizations across multiple countries.
The Hacker News similarly describes Chinese state-sponsored actors using “ARTEX,” a Go-based AI-powered penetration testing framework, to target high-value systems simultaneously. Both outlets point to CrowdStrike’s attribution of the activity to Vapor Panda (previously VexatiousTemper). The emphasis differs: CyberScoop focuses on the speed and outcome of the compromises, while The Hacker News foregrounds the specific ARTEX tool and its use against many targets at once.
Taken together, the articles portray an ongoing campaign where AI-enabled testing capabilities appear to support coordinated targeting across many organizations within a short timeframe, according to CrowdStrike.
