Chinese AI Tool Linked to Hacks in Japan
According to this WSJ article, hackers used a multi-agent penetration test tool called Artex made by a person in China called Autumn-27 to hack many Japanese web sites:
Autumn-27/ARTEX
But the repo was since deleted but a Korean person forked it and internationalized it:
jiwoochris/artex-global
Most likely hackers used open weight models for hacking. So while open weight models itself is neutral, it can create real damage if used by the bad actors.
13 comments
ARTEX is an open-source LLM-based autonomous penetration testing framework where multiple AI agents collaborate to perform asset discovery, vulnerability identification, and verification.
GitHub: Autumn-27/ARTEX
#ARTEX #AIPentesting #Cybersecurity #OpenSource #InfoSec
4 likes
Artexの作者はこのAutumn-27という方です。
github.com/Autumn-27
今はもう別の方のclone repositoryしかgithub上にありませんのでご注意ください。
Hinln/ARTEX
trhhubsd/ARTEX
※自分がcommit logを見た限りは余計なことはしてなさそうですが、正直わかりませんのでご利用は自己責任でお願いします。AIでセキュリティチェックかけたり、隔離された環境での実行を推奨します。
簡易チェックであれば、ChatGPTやAnthropic GUI上で以下のようなセキュリティ調査を依頼するとよいかと思います。
""""
このリポジトリは信頼できない第三者のソースコードです。コードを実行・インストール・ビルドせず、静的解析だけで以下を調査してください。
1. すべての外部通信先、送信内容、送信条件
2. APIキー、認証トークン、個人情報の不正取得・送信
3. バックドア、遠隔コマンド実行、外部スクリプト取得
4. スパムメール、自動投稿、不審な大量リクエスト
5. Base64などで難読化されたコード
6. install/postinstallスクリプト、GitHub Actions、隠しファイル、永続化処理
正常な通信と疑わしい通信を区別し、発見した処理についてファイル名・行番号・根拠・危険度を報告してください。
問題が見つからない場合でも、安全性が保証されたとは判断しないでください。
"""
6 likes · 822 views
ScopeSentry: Cyberspace mapping, subdomain enumeration, port scanning, vulnerability scanning, distributed nodes (2.0k stars)
What it does
All text below is quoted directly from the project README.
>Scope Sentry is a tool with functions such as asset mapping, subdomain enumeration, information leakage detection, vulnerability scanning, directory scanning, subdomain takeover, crawler, and page monitoring. By building multiple nodes, users can freely choose nodes to run scanning tasks. When new vulnerabilities emerge, it can quickly check whether the concerned assets have related components.
Current Features:
- Plugin System (Add any tool through extension)
- Subdomain Enumeration
- Subdomain Takeover Detection
- Port Scanning
- Asset Identification
- Directory Scanning
- Vulnerability Scanning
- Sensitive Information Leakage Detection
>git clone https://github.com/Autumn-27/ScopeSentry.git && cd ScopeSentry && docker-compose -f single-host-deployment.yml up -d (After running, there will be four containers: mongodb, redis, scope-sentry (server), and scopesentry-scan (scan). By default, there will be one scanning node.)
Repository
Autumn-27/ScopeSentry
Repository stats
|Metric|Value|
|:-|:-|
|Stars|1,960|
|Forks|403|
|Last release|v1.9.4 (2026-08-23)|
|Languages|Go 41%, Vue 37.7%, TypeScript 19.9%|
|Contributors|10|
|AI contributor accounts (Claude / Codex / Cursor / Copilot)|cursoragent: 6|
|AI co-authored commits|Cursor: 4|
Main contributor
|Field|Value|
|:-|:-|
|Name|Autumn|
|GitHub|@Autumn-27|
|Commits to this repo|353 (top contributor)|
|Followers|922|
──────────────────────────────
📌 How many great GitHub repos have you discovered and completely forgotten about?
Don't let another useful tool disappear into your Reddit feed. Get the community's best repos, organized by category, plus key takeaways from real developer discussions, delivered to your inbox twice a week.
📬 Never lose track of great repos again. Subscribe free.
5 points
⚠️ ARTEX : après son utilisation dans les cyberattaques contre des banques sud-coréennes, son créateur retire le dépôt GitHub, ferme le code source et arrête mises à jour et support.
Les copies déjà diffusées restent utilisables.
github.com/Autumn-27
#IA #Cyber
1 like · 18 views
Autumn-27/ScopeSentry: ScopeSentry-Cyberspace mapping, subdomain enumeration, port scanning, sensitive information discovery, vulnerability scanning, distributed nodes Autumn-27/ScopeSentry
1 like · 387 views
ARTEX公開止めてるのかそんなことだろうととりあえずダウンロードしててよかったしどうせフォークしてるところがたくさんあるに違いない
github.com/Autumn-27
4 likes · 790 views
ARTEXいつの間にか公開停止してたのか。GitHubに声明出てるね。
github.com/Autumn-27
3 likes · 254 views
Interesting that he used an open source AI tool to do that:
Autumn-27/ARTEX
and that he didn't know enough to cover his tracks and was easily identified.
Mentions
Chinese AI Tool Linked to Hacks in Japan According to this WSJ article, hackers used a multi-agent penetration test tool called Artex made by a person in China called Autumn-27 to hack many Japanese web sites: Autumn-27/ARTEX But the repo was since deleted but a Korean person forked it and internationalized it: jiwoochris/artex-global Most likely hackers used open weight models for hacking. So while open weight models itself is neutral, it can create real damage if used by the bad actors.
ARTEX is an open-source LLM-based autonomous penetration testing framework where multiple AI agents collaborate to perform asset discovery, vulnerability identification, and verification. GitHub: Autumn-27/ARTEX #ARTEX #AIPentesting #Cybersecurity #OpenSource #InfoSec
Artexの作者はこのAutumn-27という方です。 github.com/Autumn-27 今はもう別の方のclone repositoryしかgithub上にありませんのでご注意ください。 Hinln/ARTEX trhhubsd/ARTEX ※自分がcommit logを見た限りは余計なことはしてなさそうですが、正直わかりませんのでご利用は自己責任でお願いします。AIでセキュリティチェックかけたり、隔離された環境での実行を推奨します。 簡易チェックであれば、ChatGPTやAnthropic GUI上で以下のようなセキュリティ調査を依頼するとよいかと思います。 """" このリポジトリは信頼できない第三者のソースコードです。コードを実行・インストール・ビルドせず、静的解析だけで以下を調査してください。 1. すべての外部通信先、送信内容、送信条件 2. APIキー、認証トークン、個人情報の不正取得・送信 3. バックドア、遠隔コマンド実行、外部スクリプト取得 4. スパムメール、自動投稿、不審な大量リクエスト 5. Base64などで難読化されたコード 6. install/postinstallスクリプト、GitHub Actions、隠しファイル、永続化処理 正常な通信と疑わしい通信を区別し、発見した処理についてファイル名・行番号・根拠・危険度を報告してください。 問題が見つからない場合でも、安全性が保証されたとは判断しないでください。 """
ScopeSentry: Cyberspace mapping, subdomain enumeration, port scanning, vulnerability scanning, distributed nodes (2.0k stars) What it does All text below is quoted directly from the project README. >Scope Sentry is a tool with functions such as asset mapping, subdomain enumeration, information leakage detection, vulnerability scanning, directory scanning, subdomain takeover, crawler, and page monitoring. By building multiple nodes, users can freely choose nodes to run scanning tasks. When new vulnerabilities emerge, it can quickly check whether the concerned assets have related components. Current Features: - Plugin System (Add any tool through extension) - Subdomain Enumeration - Subdomain Takeover Detection - Port Scanning - Asset Identification - Directory Scanning - Vulnerability Scanning - Sensitive Information Leakage Detection >git clone https://github.com/Autumn-27/ScopeSentry.git && cd ScopeSentry && docker-compose -f single-host-deployment.yml up -d (After running, there will be four containers: mongodb, redis, scope-sentry (server), and scopesentry-scan (scan). By default, there will be one scanning node.) Repository Autumn-27/ScopeSentry Repository stats |Metric|Value| |:-|:-| |Stars|1,960| |Forks|403| |Last release|v1.9.4 (2026-08-23)| |Languages|Go 41%, Vue 37.7%, TypeScript 19.9%| |Contributors|10| |AI contributor accounts (Claude / Codex / Cursor / Copilot)|cursoragent: 6| |AI co-authored commits|Cursor: 4| Main contributor |Field|Value| |:-|:-| |Name|Autumn| |GitHub|@Autumn-27| |Commits to this repo|353 (top contributor)| |Followers|922| ────────────────────────────── 📌 How many great GitHub repos have you discovered and completely forgotten about? Don't let another useful tool disappear into your Reddit feed. Get the community's best repos, organized by category, plus key takeaways from real developer discussions, delivered to your inbox twice a week. 📬 Never lose track of great repos again. Subscribe free.
⚠️ ARTEX : après son utilisation dans les cyberattaques contre des banques sud-coréennes, son créateur retire le dépôt GitHub, ferme le code source et arrête mises à jour et support. Les copies déjà diffusées restent utilisables. github.com/Autumn-27 #IA #Cyber
Autumn-27/ScopeSentry: ScopeSentry-Cyberspace mapping, subdomain enumeration, port scanning, sensitive information discovery, vulnerability scanning, distributed nodes Autumn-27/ScopeSentry
ARTEX公開止めてるのかそんなことだろうととりあえずダウンロードしててよかったしどうせフォークしてるところがたくさんあるに違いない github.com/Autumn-27
ARTEXいつの間にか公開停止してたのか。GitHubに声明出てるね。 github.com/Autumn-27
Interesting that he used an open source AI tool to do that: Autumn-27/ARTEX and that he didn't know enough to cover his tracks and was easily identified.