ARTEX Docker image implanted with a backdoor

1. 21:54
   CSA Labs ResearchSelected

   Trojanized offensive AI tool: ARTEX Docker image backdoor

   The Docker Hub image tomicdd/artex of the open-source AI penetration testing platform ARTEX was implanted with a backdoor; anyone who knows the secret trigger marker can obtain an unauthenticated root shell inside the container. The image was pulled about 9,000 times, and from November 2 to 4, 2026, 62 internet-exposed consoles ran the backdoored version. The backdoor exists only in the prebuilt image; after the original developer removed the project from GitHub, a fork changed one line of docker-compose.yml, causing users to pull the malicious image instead. Independent researcher Badbyte disclosed the matter via The Hacker News. A CERT-In advisory on November 4 stated that threat actor Crafty Falcon used public offensive AI frameworks such as ARTEX and PentAGI to attack Indian BFSI institutions, but public reports did not associate it with the backdoored image.

2. 19:00
   X@undercode_news· Discussion

   🚨 ARTEX #Docker Supply-Chain Attack: Malicious #AI Penetration Testing Images Exposed Root Shell Access to Anyone Knowi…(opens the original post in a new tab)
3. 18:15
   X@DailyDarkWeb· Discussion

   Backdoored ARTEX Docker images pulled from Docker Hub, but installs stay at risk ⚠ BadByte says a trojanized image of…(opens the original post in a new tab)
4. 07:07
   X@__kokumoto· Discussion

   A forked version of the AI penetration testing tool ARTEX containing a backdoor is spreading. When input into the CAPTCHA field begins with a specific string, subsequent commands are passed to sh -c without authentication, and the results are returned. On the internet, 62 infected ARTEX ima…(opens the original post in a new tab)
5. 06:45
   X@cubillas888· Discussion

   BadByte: https://t.co/LyHNyBnlIm Distinct from CERT-In CRAFTY FALCON. Docker removed tomicdd/artex and congdonglinux/ar…(opens the original post in a new tab)
6. 06:45
   X@cubillas888· Discussion

   Supply chain attack: hunters of an AI pentest tool got a root shell, BadByte says. - tomicdd/artex: ~7,946 pulls by No…(opens the original post in a new tab)

1. 22:28
   X@TwitGri· Discussion

   ⚠ ARTEX : l’image Docker `tomicdd/artex` est piégée (accès root sans authentification). 62 consoles exposées identifié…(opens the original post in a new tab)
2. 22:04
   X@NetOpsLab· Discussion

   Your docker artex image might hide an AI‑driven backdoor that gives anyone root access without a password. Researchers…(opens the original post in a new tab)
3. 20:51
   X@HarshaHegde0· Discussion

   a copycat docker image for artex had a hidden login backdoor. a secret value typed into the captcha ran as root, befor…(opens the original post in a new tab)
4. 20:01
   X@NeoteoCom· Discussion

   ARTEX: una imagen Docker backdooreada esconde una shell root en su login. Los investigadores hallaron 62 consolas expue…(opens the original post in a new tab)
5. 18:33
   X@dailytechonx· Discussion

   Security alert: a tampered ARTEX Docker image (tomicdd/artex) secretly embeds a root shell in the login endpoint—no cre…(opens the original post in a new tab)
6. 17:07
   X@itsMikeKipruto· Discussion

   A backdoored AI hacking tool is exposing servers to unauthenticated root access. Researchers discovered a malicious Do…(opens the original post in a new tab)
7. 17:01
   X@SpectraAudit· Discussion

   🚨 Backdoored AI Hacking Tool Exposes Servers to Unauthenticated Root Access A malicious Docker image impersonating ART…(opens the original post in a new tab)
8. 17:00
   X@CipherSecurityN· Discussion

   A trojanized ARTEX Docker image (tomicdd/artex, ~7,900 pulls) gives anyone an unauthenticated root shell via the login…(opens the original post in a new tab)
9. 16:44
   X@TheHackersNews· Discussion

   ‼ A backdoored AI hacking tool is exposing servers to root access without authentication. A malicious Docker image fo…(opens the original post in a new tab)
10. 06:01
    X@Alopsis· Discussion

    A lot of people are talking about the ARTEX backdoor that allows RCE on the server. Here's some info: - Present only i…(opens the original post in a new tab)

Current attention 38·Peak in the comparable period 48 (Nov 7 00:00)·Change over the comparable past 24 hours 0%