ARTEX in the Wild: Storm-0940 Expands Targeting of IT and Software Vendors
Wiz tracks Storm-0940 deploying ARTEX, an AI-driven attack agent, against software vendors' identity infrastructure — Okta, Entra ID, and Cognito — with detailed log artefacts published for defender action.
Summary written by editorial AI · Source link below
Wiz Research is tracking an ARTEX-using actor, overlapping with Storm-0940, across multiple targeted software vendors. Learn how the AI agent attacks Okta, Entra, and Cognito, and what it left behind in the logs.
Editorial Analysis
Framed for the CISO & Security Leaders desk
Storm-0940 expanding to target IT and software vendors using an AI-powered attack agent signals an escalation in adversary capability; European software firms and MSPs are high-value targets in this campaign pattern.
Brief your threat-intelligence team on Storm-0940 TTPs and verify that identity-provider configurations (Okta, Entra, Cognito) follow hardening best practices.
A nation-state-linked group is using an AI-powered attack tool against the identity systems that protect enterprise cloud access — detection and hardening are urgent.
Forward-looking interpretation drafted by editorial AI under human review — not a reproduction of the source. See methodology.
External link — opens at Wiz Blog in a new tab.
More from the Threat Intel Desk
- PHP2Shell Exploitation Hits Government Entity Amid Global Scanning and Signs of AI-Assisted Hacking1d
- BlackX UEFI bootkit exploits Baton Drop flaw to bypass Secure Boot2d
- Trust Is Not What It Seems — And Fraudsters Are Counting on It3d
- AI Tools Are Generating Massive Attacks for Little Cost3d
- The Good, the Bad and the Ugly in Cybersecurity - Week 43 (2026)3d