Breaking

CrowdStrike Says China-Linked Hackers Used AI-Powered ARTEX to Target More Than 200 Organizations

October 30, 2026 at 13:01 EDT

Security
AI Agents

Hackers linked to the Chinese state used an AI-powered tool called ARTEX to target more than 200 organizations worldwide, according to cybersecurity firm CrowdStrike, which has confirmed post-exploitation activity at nine of them, including the deployment of a malware family known as BLOODALCHEMY.

AI-enabled espionage campaign · Chinese state-linked actors

An AI tool called ARTEX helped target more than 200 organizations worldwide

AI agents ran parallel attack paths while human operators directed the activity. Post-exploitation was confirmed at nine organizations, including deployment of the BLOODALCHEMY malware family.

Scale of the campaign

Each pixel of column height = one organization (200 = full column)

200+ targeted

organizations where post-exploitation activity was confirmed (orange segment, drawn to scale)

The remaining organizations are shown as the blue portion of the column.

200+

organizations targeted worldwide

confirmed post-exploitation cases

How the campaign operated

Parallel paths replace one-target-at-a-time operations

Step 1

Human operators direct the activity

→

Step 2

AI agents run several intrusion paths in parallel

→

Step 3

Initial access across many organizations

→

Step 4

Post-exploitation: deeper movement inside networks (9 confirmed)

What is still unclear

Key details remain unverified at the time of writing.

Initial access

Methods ARTEX used to get in

Continue reading

The rest of this article is for AI News Blitz readers. Choose an option below to keep reading.