ARTEX in the Wild: Storm-0940 Expands Targeting of IT and Software Vendors
Wiz tracks Storm-0940 deploying ARTEX, an AI-driven attack agent, against software vendors' identity infrastructure — Okta, Entra ID, and Cognito — with detailed log artefacts published for defender action.
Summary written by editorial AI · Source link below
Wiz Research is tracking an ARTEX-using actor, overlapping with Storm-0940, across multiple targeted software vendors. Learn how the AI agent attacks Okta, Entra, and Cognito, and what it left behind in the logs.
Editorial Analysis
An APT group weaponising an AI agent against identity providers marks an operational shift; European IT service providers and software vendors should treat this as an immediate detection priority.
Review identity-provider hardening across Okta, Entra ID, and Cognito; ingest ARTEX-specific IOCs and log patterns from Wiz's report immediately.
A nation-state-linked group is using an AI-powered attack tool against the identity systems that protect enterprise cloud access — detection and hardening are urgent.
Forward-looking interpretation drafted by editorial AI under human review — not a reproduction of the source. See methodology.
External link — opens at Wiz Blog in a new tab.
More from the Threat Intel Desk
- PHP2Shell Exploitation Hits Government Entity Amid Global Scanning and Signs of AI-Assisted Hacking1d
- BlackX UEFI bootkit exploits Baton Drop flaw to bypass Secure Boot2d
- Trust Is Not What It Seems — And Fraudsters Are Counting on It3d
- AI Tools Are Generating Massive Attacks for Little Cost3d
- The Good, the Bad and the Ugly in Cybersecurity - Week 43 (2026)3d