China-Nexus VAPOR PANDA Breached Nine of 200-Plus Targets

What happened

CrowdStrike Intelligence reported that the China-nexus adversary VAPOR PANDA utilized an AI-driven intrusion framework called ARTEX to target more than 200 organizations across 14 countries. The campaign, which occurred over an 11-day window beginning October 17, 2026, resulted in confirmed post-exploitation activity at nine organizations. The ARTEX framework, powered primarily by the DeepSeek large language model and a secondary commercial model, enabled the adversary to conduct autonomous reconnaissance, credential theft, and lateral movement.

According to CrowdStrike, the ARTEX framework employs a main agent paired with subordinate planner and worker agents that share a graph of goals and findings. While the operation maintained a human-in-the-loop component—with operators issuing instructions in Chinese to guide agent tasks—the agents executed complex attack paths in parallel. These paths spanned cloud services, container environments, Active Directory, and VPN infrastructure. In one instance, planning agents consumed approximately 1.4 billion input tokens, illustrating the scale of the automated activity.

At the nine confirmed compromised organizations, the adversary deployed the BLOODALCHEMY backdoor. The agents demonstrated advanced techniques, such as combining unsigned SAML assertions with XML external entity (XXE) flaws to gain cloud administrative roles, and exploiting unauthenticated orchestration services to achieve root access in container environments. The adversary also utilized historical data, such as 2022 directory exports, to forge administrator tokens and access mailboxes. CrowdStrike observed the agents actively evading endpoint defenses by searching for systems lacking specific security sensors. The campaign targeted a diverse range of sectors, including pharmaceutical, semiconductor, defense, nuclear, and financial organizations, as well as various government ministries in Europe, Latin America, the Middle East, and Asia. CrowdStrike assessed that this activity represents a significant expansion of VAPOR PANDA’s targeting scope and marks the first time the adversary has employed AI-driven intrusion tooling.