Chinese-nexus threat actors used ARTEX, an open-source agentic penetration-testing framework, to steal large language model API credentials and feed them back into infrastructure powering further attacks. Amazon Threat Intelligence uncovered the financially motivated campaigns after its MadPot decoy network captured requests containing the agents’ operational memory between October 3 and November 5, 2026. Sensors impersonating […]
Read the original article:
Hackers Use Stolen LLM API Keys to Power ARTEX AI Agents and Continue Credential Theft
