ARTEX in the Wild: Storm-0940 Expands Targeting of IT and Software Vendors
Wiz tracks Storm-0940 deploying ARTEX, an AI-driven attack agent, against software vendors' identity infrastructure — Okta, Entra ID, and Cognito — with detailed log artefacts published for defender action.
Summary written by editorial AI · Source link below
Wiz Research is tracking an ARTEX-using actor, overlapping with Storm-0940, across multiple targeted software vendors. Learn how the AI agent attacks Okta, Entra, and Cognito, and what it left behind in the logs.
Editorial Analysis
An APT group weaponising an AI agent against identity providers marks an operational shift; European IT service providers and software vendors should treat this as an immediate detection priority.
Review identity-provider hardening across Okta, Entra ID, and Cognito; ingest ARTEX-specific IOCs and log patterns from Wiz's report immediately.
A nation-state-linked group is using an AI-powered attack tool against the identity systems that protect enterprise cloud access — detection and hardening are urgent.
Forward-looking interpretation drafted by editorial AI under human review — not a reproduction of the source. See methodology.
External link — opens at Wiz Blog in a new tab.
More from the Threat Intel Desk
- Hackers pull off $133 million French bank heist via service provider2d
- Fake security tools on GitHub push backdoors and infostealers3d
- The Good, the Bad and the Ugly in Cybersecurity - Week 45 (2026)3d
- CEO-spoofing scammers used AI to help steal more than $100 million, feds say3d
- Chainalysis says breach exposed credentials for all customers3d