The operator used ARTEX agents with network utilities and traditional exploitation techniques to scan public services, exploit upload or SSRF weaknesses and deploy remote-access malware. Microsoft attributed the activity to Storm-3358 and reported the named RAT families. The model-powered framework coordinated tool work, while the access paths and RAT…
Inspect the ClaimsCase · DiggingBeagle record
Storm-3358 deployed remote-access tools through ARTEX-assisted financial-sector intrusions
Microsoft attributed an October financial-sector campaign to a Cambodia-based cluster using ARTEX alongside conventional exploitation and malware.
Public disclosure: Nov 6, 2026
Scope
Observed October 2026 ARTEX use by Microsoft-tracked Storm-3358 against financial organizations, disclosed November 6.
Assessment profile
Assessment method- Setting
- production
- Exploitation
- confirmed in the wild
- Evidence
- Grade B
- Remediation
- mitigation available
- AI role
- WITH AI
Basis and provenance
Microsoft incident telemetry associates ARTEX with conventional exploitation and remote-access payload activity in Storm-3358 targets; no complete prompt attribution or victim-loss total. An impact band remains unassigned because the available evidence does not establish a comparable severity score or verified numerical loss for this assessment.
Assessed Nov 8, 2026 using diggingbeagle.assessment/1.
Evidence basis: CLM-STORM3358-ARTEX-FINANCIAL-RAT-01 · CLM-STORM3358-ARTEX-FINANCIAL-RAT-02 · Microsoft Threat Intelligence: ARTEX abuse in financial-sector intrusions
At a glance
The distinctive AI role is operational acceleration and orchestration rather than a new class of authorization bypass. Attribution must remain separate from the Microsoft GitHub-to-Key-Vault campaign unless shared infrastructure is independently demonstrated.
Read the implicationsThe published account does not enumerate confirmed unique victims, stolen amounts, or every command selected autonomously by a model. Microsoft identifies the activity cluster as Cambodia-based; that description is not evidence of an individual operator nationality or government direction.
Limits and uncertaintyFull account
The operator used ARTEX agents with network utilities and traditional exploitation techniques to scan public services, exploit upload or SSRF weaknesses and deploy remote-access malware. Microsoft attributed the activity to Storm-3358 and reported the named RAT families. The model-powered framework coordinated tool work, while the access paths and RAT payloads were standard intrusion techniques. These particulars differ from the separate Microsoft investigation into GitHub-derived Azure app credentials.
The published account does not enumerate confirmed unique victims, stolen amounts, or every command selected autonomously by a model. Microsoft identifies the activity cluster as Cambodia-based; that description is not evidence of an individual operator nationality or government direction.
Microsoft's observations place the AI-enabled framework between conventional vulnerability exploitation and post-compromise payload handling. ARTEX agents ran utilities such as curl and netcat to fetch WISP, vshell and AdaptixC2 onto affected systems. The disclosure associates this activity with Storm-3358 but does not publish a complete model prompt trace or an enumerated victim-loss total. The use of ARTEX alone cannot link this cluster to the WorkOS incident, the GitHub-to-Key-Vault credential campaign or other ARTEX operators.
Mechanism and trust boundary
- 01
The actor scans externally reachable services with ARTEX and complementary utilities.
- 02
An upload or SSRF weakness provides a foothold on a vulnerable target.
- 03
ARTEX agents run tools including netcat or curl to fetch WISP, vshell or AdaptixC2 payloads.
- 04
The malware supports persistence or follow-on access subject to the compromised host privileges.
Claims & evidence
CLM-STORM3358-ARTEX-FINANCIAL-RAT-01Microsoft reported that the actor it tracks as Storm-3358 used the ARTEX agentic offensive framework during an October 2026 campaign targeting financial-sector organizations in Southeast Asia and some global financial institutions.supported
Basis: reported finding
- supportsMicrosoft Threat Intelligence: ARTEX abuse in financial-sector intrusionsprimary disclosure
Opening campaign summary: October 2026, Storm-3358 and financial-sector targets
CLM-STORM3358-ARTEX-FINANCIAL-RAT-02Microsoft observed ARTEX agents use netcat and curl to obtain WISP, vshell and AdaptixC2 remote-access tools after exploitation involving anonymous file upload and server-side request forgery.supported
Basis: reported finding
- supportsMicrosoft Threat Intelligence: ARTEX abuse in financial-sector intrusionsprimary disclosure
Campaign paragraph: exploitation, ARTEX agent download commands, WISP, vshell and AdaptixC2
Implications
The distinctive AI role is operational acceleration and orchestration rather than a new class of authorization bypass. Attribution must remain separate from the Microsoft GitHub-to-Key-Vault campaign unless shared infrastructure is independently demonstrated.
Controls and mitigations
- Repair vulnerable applications, monitor command and download sequences, constrain agent action surfaces and validate remote-access payload persistence.
Unknowns and contradictions
- The published account does not enumerate confirmed unique victims, stolen amounts, or every command selected autonomously by a model. Microsoft identifies the activity cluster as Cambodia-based; that description is not evidence of an individual operator nationality or government direction.
Sources and citation
Material revision history
- Nov 8, 2026 · Canonical change recorded · new in release · revision 229