Microsoft named a Cambodia-based criminal group running the ARTEX AI hacking framework against banks.

We read the primary ourselves: Microsoft's security blog post of November 6, 2026, ARTEX abuse expands as cybercriminals target financial sector, at microsoft.com. Microsoft says Storm-3358, which it describes as a Cambodia-based intrusion cluster, began targeting organisations in the financial sector using the agentic AI offensive framework ARTEX in October 2026. It primarily targets financial organisations in Southeast Asia, plus a smaller number of large financial organisations globally. On method: Storm-3358 uses ARTEX alongside conventional automated tools to scan systems connected to the public internet, exploits flaws including anonymous file upload and server-side request forgery, and installs the WISP, vshell and AdaptixC2 remote-access trojans for persistence and lateral movement, with ARTEX agents using netcat and curl to download them. On the framework: Microsoft says ARTEX by default drives Nmap, curl, wget, Python HTTP clients, Norma SDK WebFetch and headless Chromium through Playwright, and can run brute-force and password-spraying attacks, API enumeration and abuse, and database dumping. Microsoft's own words: this activity illustrates an ongoing trend of threat actors accelerating all stages of the attack chain. It says agentic tools of this kind can work through compromised credentials and systems at machine speed to move sideways. The post lists 8 indicator IP addresses, all marked active as of November 6: three WISP command and control nodes first seen November 2; three ARTEX or control servers first seen November 4; one ARTEX server first seen October 19, the earliest; and one first seen October 28. It ships a Defender XDR query on event ID 4688 comparing the last day against a 7 day baseline, and a Sentinel query over 30 days. One discrepancy we checked and are passing on: the indicator table gives 178.16.54.129 while the Sentinel query uses 178.15.54.129. Microsoft dates threat actor adoption of ARTEX to late August 2026 and the framework's release to July 2026. Not in the post: victim counts, losses, named organisations, or any claim about which model providers ARTEX reaches.

1. Jul 2026

   ARTEX is released publicly as an agentic offensive security framework, driving Nmap, curl, wget, Python HTTP clients, Norma SDK WebFetch and headless Chromium through Playwright by default.

2. Late Aug

   Microsoft dates the start of threat actor adoption of ARTEX to late August 2026.

3. Oct 19

   The earliest indicator in Microsoft's table is first seen: 178.16.54.129, an ARTEX server. A second follows on October 28. Microsoft dates the financial sector campaign to October.

4. Nov 5

   Censys reports ARTEX exposed on 1,465 internet-facing hosts, 155 of them carrying other threat detections, with 32 open directories. Edition 078 cards a different ARTEX story: a researcher's agent escaping its test environment and taking a company's customer records.

5. Nov 6

   Microsoft publishes the Storm-3358 report with 8 indicators and hunting queries, hours before Chainalysis begins restoring the products it took offline after its own agentic intrusion. Editions 079 and 080 reached neither.